Cyber Security: Vulnerability Alerts and Notifications

Pepperl+Fuchs investigates all reports of security vulnerabilities affecting Pepperl+Fuchs products and services. To report a security vulnerability to Pepperl+Fuchs please follow the Pepperl+Fuchs vulnerability handling guideline.

Report a vulnerability to the Pepperl+Fuchs CERT

Report a vulnerability or cyber security issue relating to a Pepperl+Fuchs product
PGP key for encrypted communication

Advisories and Bulletins

2022

2022-05-16: Pepperl+Fuchs: RSM-EX devices—Vulnerability may allow information disclosure to remote unauthorized attackers
2022-05-16: Pepperl+Fuchs: (Update) Multiple VisuNet devices—Vulnerability may allow remote authorized attackers trigger a remote code execution
2022-01-17: Pepperl+Fuchs: (Update) Multiple DTM and VisuNet Software – Vulnerability may allow local authorized attackers access and remote code execution on the target device

2021

2021-08-16: Pepperl+Fuchs: WirelessHART-Gateway– Vulnerability may allow remote attackers to cause a Denial Of Service
2021-08-16: Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP Sensors – Multiple Vulnerabilities may allow remote attackers access and full remote code execution on the target device
2021-08-16: Pepperl+Fuchs: (Update) Multiple ICE1 Ethernet IO Modules – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-07-30: Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in HMI Devices
2021-03-30: Pepperl+Fuchs: Multiple VMT Vision System solutions PROFINET Products – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-02-22: Pepperl+Fuchs: (Update) Multiple Products / Comtrol RocketLinx® – Multiple Vulnerabilities may allow remote attackers access, program execution and to tap information
2021-02-16: Pepperl+Fuchs: Multiple EtherNet/IP Products – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-02-16: Pepperl+Fuchs: Multiple PROFINET Products – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-02-15: Pepperl+Fuchs: Multiple Products IDENTControl – Vulnerability may allow remote attackers to cause a Denial Of Service
2021-01-11: Pepperl+Fuchs: PACTware – Vulnerability may allow any program execution
2021-01-04: Pepperl+Fuchs: Multiple Products / Comtrol IO-Link Master – Multiple Vulnerabilities may allow remote attackers access, program execution and to tap information

2020

2020-11-16: Pepperl+Fuchs: (Update) ICRL-M-8RJ45/4SFP-G-DIN and ICRL-M-16RJ45/4CP-G-DIN / Comtrol RocketLinx® – Multiple Vulnerabilities may allow remote attackers access, program execution and to tap information
2020-09-09: Pepperl+Fuchs: VMT MSS and VMT IS / VMT GmbH—Several vulnerabilities in products utilizing WIBU SYSTEMS CodeMeter components
2020-05-29: Pepperl+Fuchs: PACTware–Recoverable Passwords and Unverified Password Change
2020-03-31: Pepperl+Fuchs: Kr00k Vulnerabilities in Broadcom Wi-Fi Chipsets

2019

2019-11-06: Pepperl+Fuchs: Security Advisory for Android Binder Driver Use After Free
2019-10-04: Pepperl+Fuchs: Security Advisory for Remote Code Execution Vulnerability in HMI Devices (Update A)
2019-03-14: Pepperl+Fuchs: Security Advisory Related to BlueBorne Attack Vectors in ecom Mobile Devices
2019-01-28: Pepperl+Fuchs: Path Traversal in WirelessHART Gateway

2018

2018-10-24: Pepperl+Fuchs / ecom instruments WLAN enabled products utilizing WPA2 encryption (Update A)
2018-10-24: Pepperl+Fuchs: Security Advisory for Meltdown and Spectre Attacks in ecom mobile Devices (Update A)
2018-10-20: Pepperl+Fuchs: Android Privilege Elevation Vulnerability in ecom mobile devices
2018-07-09: Pepperl+Fuchs: Security Advisory for Remote Code Execution Vulnerability in HMI Devices
2018-01-18: Pepperl+Fuchs: Security Advisory for Meltdown and Spectre Attacks in HMI Devices

Advisories and bulletins

2015

2015-02-04: HART DTM Vulnerability

Cyber Security Information and Reporting

Report a vulnerability to the Pepperl+Fuchs CERT

Advisories and Bulletins

Advisories and bulletins