CVE-2020-12495

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...

CVE-2020-12496: Exposure of Sensitive Information to an Unauthorized Actor

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 and Memograph M Neutral/Private Label RSG45, ORSG45 with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to t...

CVE-2020-12495: Improper Privilege Management

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...

PT-2020-13143

Name of the Vulnerable Software and Affected Versions Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 versions V2.0.0 and above Endress+Hauser Memograph M Neutral/Private Label RSG45, ORSG45 versions V2.0.0 and above Description The issue concerns exposure of sensitive information t...

PT-2020-13142

Name of the Vulnerable Software and Affected Versions Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 versions prior to V2.0.0 Description The affected device has a web-based user interface with a role-based access system, where users with different roles have different write and re...

Endress+hauser Ecograph Information Disclosure Vulnerability

The Endress+hauser Ecograph is a data logger from Endress+Hauser Switzerland. It is used to record and visualize all process sequences safely and completely. An information disclosure vulnerability exists in Endress+hauser Ecograph T version V2.0.0 and later versions, which stems from the easy...