Endress

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Endress records in CISA KEV

No Endress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Meac300-fnade4 Firmware 19 records MEDIUM Orsg35 Firmware 2 records MEDIUM Orsg45 Firmware 2 records MEDIUM Rsg35 Firmware 2 records MEDIUM Rsg45 Firmware 2 records MEDIUM Echo Curve Viewer 1 record MEDIUM Field Xpert Smt50 Firmware 1 record MEDIUM Field Xpert Smt70 Firmware 1 record MEDIUM

Records

2 records in Orsg35 Firmware · all components

TI-2020-09990 CVE-2020-12495 · GHSA-wvp6-r3f2-3fpj

ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management

MEDIUM 41

Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0092 Published 2020-11-19 Fixed in V2.0.0 CWE-269

TI-2020-09991 CVE-2020-12496 · GHSA-wq5p-2cwp-p8wr

Information disclosure in Endress+Hauser RSG35 - Ecograph T

LOW 30

Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unautho…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00835 Published 2020-11-19 No fix listed CWE-200

Open these records in search →

Critical	5
High	9
Medium	9
Low	0
No CVSS	0