Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Frauscher Clear all filters
TI-2025-03264 CVE-2025-3705 · GHSA-qrmv-v4hm-rx2g

OS Command Injection via USB Config Load

Priority LOW 31

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00716 Published 2025-07-07 Fixed in v2.13.3 CWE-78
TI-2025-03193 CVE-2025-3626 · GHSA-43fm-wrjr-xr6x

OS Command Injection via Config Upload in WebUI

Priority MEDIUM 43

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00912 Published 2025-07-07 Fixed in v2.13.3 CWE-78
TI-2023-05065 CVE-2023-5500 · GHSA-7wqr-pgmh-j75f

Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability

Priority MEDIUM 40

This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00958 Published 2023-12-11 No fix listed CWE-94
TI-2023-03968 CVE-2023-4292 · GHSA-fxx3-gqjr-6rvh

Frauscher FDS101 for FAdC/FAdCi SQL injection vulnerability

Priority LOW 30

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0046 Published 2023-09-21 No fix listed CWE-89
TI-2023-03841 CVE-2023-4152 · GHSA-v7hg-r7jc-rmvp

Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability

Priority MEDIUM 41

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00984 Published 2023-09-21 No fix listed CWE-22
TI-2023-03967 CVE-2023-4291 · GHSA-cr5x-g4rg-rjw5

Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability

Priority MEDIUM 51

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface without authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01204 Published 2023-09-21 No fix listed CWE-94