Read the docs

Frauscher

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Frauscher records in CISA KEV

No Frauscher vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Frauscher Diagnostic System 101 4 records MEDIUM Frauscher Diagnostic System 102 2 records MEDIUM

Records

8 records

TI-2023-03967 CVE-2023-4291 · GHSA-cr5x-g4rg-rjw5

Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability

Priority MEDIUM 51

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface without authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2023-09-21 No fix listed CWE-94
TI-2025-03193 CVE-2025-3626 · GHSA-43fm-wrjr-xr6x

OS Command Injection via Config Upload in WebUI

Priority MEDIUM 43

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00912 Published 2025-07-07 Fixed in v2.13.3 CWE-78
TI-2023-03841 CVE-2023-4152 · GHSA-v7hg-r7jc-rmvp

Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability

Priority MEDIUM 41

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00984 Published 2023-09-21 No fix listed CWE-22
TI-2023-05065 CVE-2023-5500 · GHSA-7wqr-pgmh-j75f

Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability

Priority MEDIUM 40

This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00958 Published 2023-12-11 No fix listed CWE-94
TI-2025-03264 CVE-2025-3705 · GHSA-qrmv-v4hm-rx2g

OS Command Injection via USB Config Load

Priority LOW 31

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00716 Published 2025-07-07 Fixed in v2.13.3 CWE-78
TI-2023-03968 CVE-2023-4292 · GHSA-fxx3-gqjr-6rvh

Frauscher FDS101 for FAdC/FAdCi SQL injection vulnerability

Priority LOW 30

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0046 Published 2023-09-21 No fix listed CWE-89
Open these records in search →