Cybersecurity: Kwetsbaarheidswaarschuwingen en -meldingen

Pepperl+Fuchs onderzoekt alle risicomeldingen betreffende de cyberveiligheid van haar producten en diensten. Volg de Pepperl+Fuchs richtlijn voor de behandeling van risicomeldingen om een probleem aan Pepperl+Fuchs te rapporteren.

Meld eventuele risico's aan het Pepperl+Fuchs CERT

Report a vulnerability or cyber security issue relating to a Pepperl+Fuchs product
PGP key for encrypted communication

Advies en Infobulletins

2022

2022-05-16: Pepperl+Fuchs: RSM-EX devices—Vulnerability may allow information disclosure to remote unauthorized attackers
2022-05-16: Pepperl+Fuchs: (Update) Multiple VisuNet devices—Vulnerability may allow remote authorized attackers trigger a remote code execution
2022-01-17: Pepperl+Fuchs: (Update) Multiple DTM and VisuNet Software – Vulnerability may allow local authorized attackers access and remote code execution on the target device

2021

2021-08-16: Pepperl+Fuchs: WirelessHART-Gateway– Vulnerability may allow remote attackers to cause a Denial Of Service
2021-08-16: Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP Sensors – Multiple Vulnerabilities may allow remote attackers access and full remote code execution on the target device
2021-08-16: Pepperl+Fuchs: (Update) Multiple ICE1 Ethernet IO Modules – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-07-30: Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in HMI Devices
2021-03-30: Pepperl+Fuchs: Multiple VMT Vision System solutions PROFINET Products – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-02-22: Pepperl+Fuchs: (Update) Multiple Products / Comtrol RocketLinx® – Multiple Vulnerabilities may allow remote attackers access, program execution and to tap information
2021-02-16: Pepperl+Fuchs: Multiple EtherNet/IP Products – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-02-16: Pepperl+Fuchs: Multiple PROFINET Products – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-02-15: Pepperl+Fuchs: Multiple Products IDENTControl – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-01-11: Pepperl+Fuchs: PACTware – Vulnerability may allow any program execution
2021-01-04: Pepperl+Fuchs: Multiple Products / Comtrol IO-Link Master – Multiple Vulnerabilities may allow remote attackers access, program execution and to tap information

2020

2020-11-16: Pepperl+Fuchs: (Update) ICRL-M-8RJ45/4SFP-G-DIN and ICRL-M-16RJ45/4CP-G-DIN / Comtrol RocketLinx® – Multiple Vulnerabilities may allow remote attackers access, program execution and to tap information
2020-09-09: Pepperl+Fuchs: VMT MSS and VMT IS / VMT GmbH—Several vulnerabilities in products utilizing WIBU SYSTEMS CodeMeter components
2020-05-29: Pepperl+Fuchs: PACTware–Recoverable Passwords and Unverified Password Change
2020-03-31: Pepperl+Fuchs: Kr00k Vulnerabilities in Broadcom Wi-Fi Chipsets

2019

2019-11-06: Pepperl+Fuchs: Security Advisory for Android Binder Driver Use After Free
2019-10-04: Pepperl+Fuchs: Security Advisory for Remote Code Execution Vulnerability in HMI Devices (Update A)
2019-03-14: Pepperl+Fuchs: Security Advisory Related to BlueBorne Attack Vectors in ecom Mobile Devices
2019-01-28: Pepperl+Fuchs: Path Traversal in WirelessHART Gateway

Advies en infobulletins

2018

24/10/2018: Pepperl+Fuchs / ecom instruments WLAN-producten met WPA2-beveiliging (update A)
24/10/2018: Pepperl+Fuchs: Veiligheidsadvies voor Meltdown- en Spectre-aanvallen op mobiele apparatuur van ecom (update A)
20/10/2018: Pepperl+Fuchs: Android Privilege Elevation Vulnerability (ongeautoriseerde toekenning van hogere privileges) op mobiele apparatuur van ecom
9/07/2018: Pepperl+Fuchs: Veiligheidsadvies voor Remote Code Execution Vulnerability (ongeautoriseerde overname vanop afstand) op HMI-apparatuur
18/01/2018: Pepperl+Fuchs: Veiligheidsadvies voor Meltdown- en Spectre-aanvallen op HMI-apparatuur

Advies en infobulletins

2015

2015-02-04: HART DTM-kwetsbaarheid

Informatie en meldingen betreffende cybersecurity

Meld eventuele risico's aan het Pepperl+Fuchs CERT

Advies en Infobulletins

Advies en infobulletins

Advies en infobulletins