Lenze: Incorrect signature validation in the enable SSH routine
The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which could allow unauthorized access to the device.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-14837US | — | — | ||
Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of… | ||||
references
External citations — patches, advisories, analysis.
- VDE-2026-077: Lenze: Incorrect signature validation in the enable SSH routine - HTMLself
- CERT@VDE Security Advisories for Lenzeexternal
- VDE-2026-077: Lenze: Incorrect signature validation in the enable SSH routine - CSAFself
- Lenze SE has a Product Security Incident Response Team (PSIRT) with its own communication channel. Contact us via https://www.lenze.com/ and the Service and Cyber Security tab.external
remediations (2)
- Mitigation
Check to see if there is an activation file on the SD Card, and delete it. In addition, it is recommended that you protect each access path with appropriate measures, such as physically securing access to the SD Card, authorizing file transfers via PLC Designer (if supported by the respective product), authorizing file transfers via OPC UA (if supported by the respective product), and customizing the key for SFTP access.
- Fixed
To resolve this security vulnerability, we recommend installing a firmware update. | Product | Firmware | Fixed Version | | --------------- | -------- | ------------- | | Controller c430 | c4xx | 1.15.2 | | c520 | c5xx | 1.15.2 | | c550 | c5xx | 1.15.2 | | i950 GenA | i950 | 1.15.0 | | i950 GenB | i950 | 2.0.3 |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan