Endress+hauser
26 CVEs across 37 Endress+hauser products. Browse Endress+hauser vulnerabilities, severities, and proof-of-concept exploits.
Endress+hauser products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-9593 | Medium | 6.7 | 2026-08-03 | A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted fi… |
CVE-2025-41690 | High | 7.4 | 2025-09-02 | A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. Thi… |
CVE-2025-27461 | High | 7.6 | 2025-07-03 | During startup, the device automatically logs in the EPC2 Windows user without requesting a password. |
CVE-2025-27460 | High | 7.6 | 2025-07-03 | The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an attacker with physical access to the d… |
CVE-2025-27459 | Medium | 4.4 | 2025-07-03 | The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered. |
CVE-2025-27458 | Medium | 6.5 | 2025-07-03 | The VNC authentication mechanism bases on a challenge-response system where both server and client use the same password for encryption. The challenge is sent… |
CVE-2025-27457 | Medium | 6.5 | 2025-07-03 | All communication between the VNC server and client(s) is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data. |
CVE-2025-27456 | High | 7.5 | 2025-07-03 | The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it… |
CVE-2025-27455 | Medium | 4.3 | 2025-07-03 | The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on s… |
CVE-2025-27454 | Medium | 4.3 | 2025-07-03 | The application is vulnerable to cross-site request forgery. An attacker can trick a valid, logged in user into submitting a web request that they did not inte… |
CVE-2025-27453 | Medium | 5.3 | 2025-07-03 | The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript. |
CVE-2025-27452 | Medium | 5.3 | 2025-07-03 | The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure. There are modules activated that are not r… |
CVE-2025-27451 | Medium | 5.3 | 2025-07-03 | For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existin… |
CVE-2025-27450 | Medium | 6.5 | 2025-07-03 | The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted HTTP connection to… |
CVE-2025-27449 | High | 7.5 | 2025-07-03 | The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible t… |
CVE-2025-27448 | Medium | 6.8 | 2025-07-03 | The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboards can inject JavaScript code into the dashboard nam… |
CVE-2025-27447 | High | 7.4 | 2025-07-03 | The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL, which injects JavaScript code into the website. The… |
CVE-2025-1711 | Medium | 4.3 | 2025-07-03 | Multiple services of the DUT as well as different scopes of the same service reuse the same credentials. |
CVE-2025-1710 | High | 7.5 | 2025-07-03 | The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susc… |
CVE-2025-1709 | Medium | 6.5 | 2025-07-03 | Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded). |
CVE-2025-1708 | High | 8.6 | 2025-07-03 | The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content. |
CVE-2024-8751 | High | 7.5 | 2024-09-12 | A vulnerability allows a remote unauthenticated attacker to modify the prod uct’s IP address over the Sopas ET interface. This can lead to a Denial of Service… |
CVE-2024-6596 | Critical | 9.8 | 2024-09-10 | An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context. |
CVE-2020-12496 | Medium | 6.5 | 2020-11-19 | Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and abov… |
CVE-2020-12495 | Critical | 9.1 | 2020-11-19 | Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected… |
CVE-2015-6463 | | 2015-09-28 | CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet ser… |