AUMA PSIRT (CSAF)
advisoryDEauma_psirt
AUMA PSIRT CSAF 2.0 advisories (hosted by CERT@VDE).
01
advisories (6)
Vendor and ecosystem advisories describing this.
02
product assertions (17)
Products and version ranges known to be affected.
- Firmware 01-01.09.00 installed on TIGRON
- Firmware 01-01.10.00 installed on PROFOX
- Firmware 01.02.00 installed on MEC 03.01
- Firmware 02-01.01.00 installed on TIGRON SIL
- Firmware 03.05.01 installed on SGx/SVx
- Firmware 06.09.04 installed on AC1.2
- Firmware <01-01.09.00 installed on TIGRON
- Firmware <01-01.10.00 installed on PROFOX
- Firmware <01.02.00 installed on MEC 03.01
- Firmware <02-01.01.00 installed on TIGRON SIL
- Firmware <v2.6 installed on SIMA² Master Station
- Firmware >03.00.00<03.05.01 installed on SGx/SVx
- Firmware >06.00.00<06.09.04 installed on AC1.2
- Firmware v2.6 installed on SIMA² Master Station
- AUMA SIMA² Master Station
- AUMA Riester GmbH AC1.2
- AUMA Riester GmbH Hardware
03
CVE links (78)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41657US | — | — | ||
Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker. | ||||
| CVE-2025-3496US | — | — | ||
An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface. | ||||
| CVE-2022-4286US | medium6.1 | — | ||
A reflected cross-site scripting (XSS) vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions >=3.00 and <=C4.93 that enables a remote attacker to e… | ||||
| CVE-2021-22275US | high8.6 | — | ||
Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of se… | ||||
| CVE-2016-20009US | critical9.8 | — | ||
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer support… | ||||
| CVE-2020-15025US | medium4.9 | — | ||
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed… | ||||
| CVE-2020-13817US | high7.4OT elevated | — | ||
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… | ||||
| CVE-2018-8956US | medium5.3 | — | ||
ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode… | ||||
| CVE-2020-11868US | high7.5 | — | ||
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address,… | ||||
| CVE-2015-7851US | medium6.5 | — | ||
Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directo… | ||||
| CVE-2019-8936US | high7.5 | Exploit | ||
NTP through 4.2.8p12 has a NULL Pointer Dereference. | ||||
| CVE-2018-12327US | critical9.8 | Exploit | ||
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argumen… | ||||
| CVE-2018-7183US | critical9.8 | — | ||
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a respon… | ||||
| CVE-2018-7185US | high7.5 | — | ||
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp an… | ||||
| CVE-2018-7184US | high7.5 | — | ||
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a… | ||||
| CVE-2018-7182US | high7.5 | Exploit | ||
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd inst… | ||||
| CVE-2015-7871US | critical9.8 | Exploit | ||
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. | ||||
| CVE-2015-7855US | medium6.5 | Exploit | ||
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 pa… | ||||
| CVE-2015-7854US | high8.8 | — | ||
Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon… | ||||
| CVE-2015-7853US | critical9.8 | — | ||
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (cr… | ||||
showing 20 of 78