Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01
Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.
describes (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-1229US | critical9.8 | — | ||
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas.
E… | ||||
| CVE-2025-68121US | critical10.0 | — | ||
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed h… | ||||
| CVE-2025-61732US | — | — | ||
A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary. | ||||
| CVE-2025-15467US | — | Exploit | ||
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with
maliciously crafted AEAD parameters can trigger a stack buffer overflow.
Impact summary: A stack buffer… | ||||
| CVE-2025-41115US | critical9.8 | Exploit | ||
SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifec… | ||||
| CVE-2025-4674US | — | — | ||
The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This… | ||||
| CVE-2024-56406US | — | — | ||
A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.… | ||||
| CVE-2024-9264US | high8.8 | Exploit | ||
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being pas… | ||||
| CVE-2024-1442US | high8.8 | — | ||
A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *.
Doing this will grant the user access to read, query, edit and d… | ||||
| CVE-2023-3128US | critical9.8 | Exploit | ||
Grafana is validating Azure AD accounts based on the email claim.
On Azure AD, the profile email field is not unique and can be easily modified.
This leads to account takeover… | ||||
| CVE-2022-23498US | high8.8 | — | ||
Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result,… | ||||
| CVE-2022-31097US | high8.7 | — | ||
Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are vulnerable to stored cross-sit… | ||||
| CVE-2022-29170US | high8.5 | Exploit | ||
Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that th… | ||||
| CVE-2022-28660US | critical9.8OT elevated | — | ||
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions 1.2.1, 1.3.1, and 1.4.0 conta… | ||||
| CVE-2022-24812US | high8.8 | — | ||
Grafana is an open-source platform for monitoring and observability. When fine-grained access control is enabled and a client uses Grafana API Key to make requests, the permissions… | ||||
| CVE-2022-28391US | high8.8OT elevated | — | ||
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attack… | ||||
| CVE-2022-26148US | critical9.8OT high | — | ||
An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and a… | ||||
| CVE-2022-21703US | high8.8 | — | ||
Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerability which allows attackers to elevate t… | ||||
| CVE-2020-27846US | critical9.8 | — | ||
A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confiden… | ||||
| CVE-2018-15727US | critical9.8 | Exploit | ||
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an… | ||||
references
External citations — patches, advisories, analysis.
- VDE-2026-049: Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01 - CSAFself
- VDE-2026-049: Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01 - HTMLself
- CERT@VDE Security Advisories for Balluff GmbHexternal
- Balluff GmbH PSIRTexternal
remediations (20)
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
- Fixed
Update to the firmware version 2.4.1.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan