7183 matches found
CVE-2025-41651
CVE-2025-41651 concerns a missing authentication flaw in Weidmueller industrial Ethernet switches (e.g., E-SW-VL08MT-8TX, IE-SW-PL10M-3GT-7TX, IE-SW-PL16M-16TX, IE-SW-PL18M-2GC-16TX). The root cause is lack of authentication for a critical function, enabling an unauthenticated remote attacker to ...
CVE-2025-41650 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service...
CVE-2025-41650 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service...
CVE-2025-41650
CVE-2025-41650 affects Weidmueller Interface industrial Ethernet switches. Multiple product lines are affected by insufficient input validation in cmd service handling, enabling an unauthenticated remote attacker to disrupt operations and cause a denial-of-service. Affected products and minimum f...
CVE-2025-41649 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices...
CVE-2025-41649
CVE-2025-41649 describes an out-of-bounds write vulnerability caused by insufficient input validation in certain Weidmueller industrial Ethernet switches (e.g., IE-SW-PL10M-3GT-7TX family). An unauthenticated remote attacker can trigger data writes beyond buffer bounds, potentially leading to a d...
CVE-2025-41649 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices...
CVE-2025-0220
A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
CVE-2024-20465
A vulnerability in the access control list ACL programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect handling of IPv4 ACLs o...
CVE-2024-21806
Improper conditions check in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-23499
Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2024-21769
Uncontrolled search path in some IntelR Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-22727
Teltonika TRB1-series devices with firmware before TRB1R00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB...
CVE-2024-21828
Improper access control in some IntelR Ethernet Controller Administrative Tools software before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-22376
Uncontrolled search path element in some installation software for IntelR Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-24983
Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2024-44610
PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php...
CVE-2023-39432
Improper access control element in some IntelR Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-5324
A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local network. The exploit has been disclosed...