Endress

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Endress records in CISA KEV

No Endress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Meac300-fnade4 Firmware 19 records MEDIUM Orsg35 Firmware 2 records MEDIUM Orsg45 Firmware 2 records MEDIUM Rsg35 Firmware 2 records MEDIUM Rsg45 Firmware 2 records MEDIUM Echo Curve Viewer 1 record MEDIUM Field Xpert Smt50 Firmware 1 record MEDIUM Field Xpert Smt70 Firmware 1 record MEDIUM

Records

1 record in Echo Curve Viewer · all components

TI-2024-06118 CVE-2024-6596 · GHSA-hmhp-m2mf-h8m9

Endress+Hauser: Multiple products are vulnerable to code injection

MEDIUM 50

An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00791 Published 2024-09-10 No fix listed CWE-94

Open these records in search →