Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-12069

CODESYS V3 prone to Inadequate Password Hashing

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Codesys Festo Pilz and 1 more
Products
Control For Beaglebone Control For Empc-a\/imx6 Control For Iot2000 and 111 more
CVE-2022-3270

Incomplete Documentation of remote functions in FESTO products.

In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Festo
Products
Bus Module Cpx-e-ep Bus Module Cpx-e-ep Firmware Bus Node Cpx-fb32 and 195 more