VDE Security Advisories: Multiple CVEs in WAGO/Sauter/Pilz Industrial Control Systems

This webpage screenshot provides vulnerability information from multiple vendors. Below is a summary of the key details: WAGO: - Security Advisory: - Vulnerability Description: Multiple CODESYS vulnerabilities exist in various WAGO firmware across different devices, affecting runtime, visualization, and OPC UA server components. - Related CVEs: CVE-2025-1468, CVE-2025-0694, CVE-2025-2595 Sauter: - Security Advisory: - Vulnerability Description: Vulnerabilities discovered in the embedded firmware of Sauter modulo 6, impacting the embedded web server and interface to Sauter CASE Suite. - Related CVEs: CVE-2025-41723, CVE-2025-41719, CVE-2025-41724, CVE-2025-41722, CVE-2025-41720, CVE-2025-41721 Pilz: - Security Advisory: - Vulnerability Description: PASvisu Runtime is affected by vulnerabilities in third-party components, potentially exploitable via malicious network requests. - Related CVE: CVE-2025-51495 Phoenix Contact: - Security Advisories: and - Vulnerability Description: Multiple vulnerabilities in firmware for CHARX SEC-3xxx charging controllers and QUINT4-UPS EIP devices, potentially enabling remote denial-of-service attacks and unauthorized access to login credentials. - Related CVEs: - : CVE-2025-41699 - : CVE-2025-41703, CVE-2025-41705, CVE-2025-41707, CVE-2025-41706, CVE-2025-41704 Murrelektronik: - Security Advisory: - Vulnerability Description: The embedded web interface of IMPACT67 Pro PN DIO8 IOL8 transmits login credentials in plaintext via HTTP GET requests; the device does not support HTTPS/TLS encryption. - Related CVE: CVE-2025-41718 WAGO: (Another vulnerability) - Security Advisory: - Vulnerability Description: Due to missing authentication checks, WAGO Solution Builder and Device Sphere are at risk of information disclosure. - Related CVEs: CVE-2025-41715, CVE-2025-41716 WAGO: (Hardware-related) - Security Advisory: - Vulnerability Description: A vulnerability in the Ethernet switch circuit caused by a pull-up resistor at the reset input leads to premature activation and undefined behavior. Switching to a pull-down resistor maintains stability. - Related CVE: CVE-2025-41713 The above information provides specific vulnerability IDs, affected products, and associated risks.

Goal Reached Thanks to every supporter — we hit 100%!

VDE Security Advisories: Multiple CVEs in WAGO/Sauter/Pilz Industrial Control Systems