VDE-2026-065

csafDEendress_hauser_psirt

Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library

view advisory published 2026-08-03

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-9593US——
A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationFDI Package library V1.00.00 < V2.01.00

    If an immediate update is not possible, Endress+Hauser recommends the following measures to reduce the risk of exploitation: * Restrict access to affected systems to authorized personnel only * Apply the principle of least privilege and limit administrative access to trusted users. * Protect application installation directories against unauthorized modification through appropriate operating system access controls. Following these recommendations reduces the risk of unauthorized activation.

  • FixedFDI Package library V1.00.00 < V2.01.00

    Endress+Hauser provides an updated version of FDI Package library V2.02.00 that addresses this vulnerability. Endress+Hauser strongly recommends that customers update to the latest fixed version. For support, please contact your local service center.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan