İçeriğe atla
Noroxi

endress kayıtları

endress üreticisine ait 23 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

23 kayıt
  • CVE-2024-6596
    39İzleyin

    Endress+Hauser: Multiple products are vulnerable to code injection

    KritikCVSS 9,8İstismar yokEPSS %1

    endress · echo curve viewer10 Eyl 2024

  • CVE-2025-27456
    39İzleyin

    The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attempts within a short ti

    KritikCVSS 9,8İstismar yokEPSS %1

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-1710
    39İzleyin

    The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time fr

    KritikCVSS 9,8İstismar yokEPSS %1

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27449
    39İzleyin

    The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, maki

    KritikCVSS 9,8İstismar yokEPSS %1

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2020-12495
    35İzleyin

    ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management

    YüksekCVSS 8,8İstismar yokEPSS %1

    endress · rsg35 firmware19 Kas 2020

  • CVE-2018-16059
    30İzleyin

    Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.

    OrtaCVSS 5,3Kavram kanıtıEPSS %30

    endress · wirelesshart fieldgate swg70 firmware7 Eyl 2018

  • CVE-2025-1708
    30İzleyin

    The application is vulnerable to SQL injection attacks.

    YüksekCVSS 7,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27452
    30İzleyin

    The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure.

    YüksekCVSS 7,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-1711
    30İzleyin

    Multiple services of the DUT as well as different scopes of the same service reuse the same credentials.

    YüksekCVSS 7,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27457
    30İzleyin

    All communication between the VNC server and client(s) is unencrypted.

    YüksekCVSS 7,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27459
    30İzleyin

    The VNC application stores its passwords encrypted within the registry but uses DES for encryption.

    YüksekCVSS 7,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27458
    30İzleyin

    The VNC authentication mechanism bases on a challenge-response system where both server and client use the same password for encryption.

    YüksekCVSS 7,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27461
    27İzleyin

    During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

    OrtaCVSS 6,8İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27460
    27İzleyin

    The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker.

    OrtaCVSS 6,8İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2020-12496
    26İzleyin

    ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actor

    OrtaCVSS 6,5İstismar yokEPSS %1

    endress · rsg35 firmware19 Kas 2020

  • CVE-2025-27453
    26İzleyin

    The HttpOnly flag is set to false on the PHPSESSION cookie.

    OrtaCVSS 6,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-1709
    26İzleyin

    Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded).

    OrtaCVSS 6,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27450
    26İzleyin

    The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4.

    OrtaCVSS 6,5İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27447
    24İzleyin

    The web application is susceptible to cross-site-scripting attacks.

    OrtaCVSS 6,1İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27455
    24İzleyin

    The web application is vulnerable to clickjacking attacks.

    OrtaCVSS 6,1İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27451
    21İzleyin

    For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect passwo

    OrtaCVSS 5,3İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27448
    21İzleyin

    The web application is susceptible to cross-site-scripting attacks.

    OrtaCVSS 5,4İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025

  • CVE-2025-27454
    17İzleyin

    The application is vulnerable to cross-site request forgery.

    OrtaCVSS 4,3İstismar yokEPSS %0

    endress · meac300-fnade4 firmware3 Tem 2025