| CVE-2025-41771 |
An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is…
|
5.3
Moyenne
|
12 août 2026 |
| CVE-2025-41770 |
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an…
|
8.7
Élevée
|
12 août 2026 |
| CVE-2025-41769 |
The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration
|
9.3
Critique
|
12 août 2026 |
| CVE-2025-41669 |
The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device…
|
8.7
Élevée
|
27 mai 2026 |
| CVE-2025-41670 |
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating…
|
8.7
Élevée
|
27 mai 2026 |
| CVE-2025-41668 |
A low privileged remote attacker with file access can replace a critical file or folder used by the service…
|
8.8
Élevée
|
8 juil. 2025 |
| CVE-2025-41667 |
A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get…
|
8.8
Élevée
|
8 juil. 2025 |
| CVE-2025-41666 |
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write…
|
8.8
Élevée
|
8 juil. 2025 |
| CVE-2025-41665 |
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect…
|
6.5
Moyenne
|
8 juil. 2025 |
| CVE-2023-46144 |
A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low…
|
6.5
Moyenne
|
14 déc. 2023 |
| CVE-2023-46142 |
A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with…
|
8.8
Élevée
|
14 déc. 2023 |