Vulnerabilidades em Endress+Hauser
25 resultadosAnálise Vexday
A Endress+Hauser registra 24 vulnerabilidades acumuladas na base, sendo 2 classificadas como críticas, porém nenhuma está sob ataque ativo conhecido. A fraqueza dominante está em mecanismos de autenticação inadequados (CWE-307), padrão típico de dispositivos industriais legados. Sem publicações de vulnerabilidades nos últimos 90 dias, o risco atual é estável, mas recomenda-se priorizar a remediação das duas críticas.
CVE-2024-8751HIGHCVE-2024-8751EPSS 0.9%CVE-2020-12495CRITICALENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege managementEPSS 0.9%CVE-2020-12496MEDIUMENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actorEPSS 0.8%CVE-2024-6596CRITICALEndress+Hauser: Multiple products are vulnerable to code injectionEPSS 0.8%CVE-2025-27456HIGHCVE-2025-27456EPSS 0.5%CVE-2025-27449HIGHCVE-2025-27449EPSS 0.5%CVE-2025-1710HIGHCVE-2025-1710EPSS 0.5%CVE-2025-1708HIGHCVE-2025-1708EPSS 0.4%CVE-2025-27452MEDIUMCVE-2025-27452EPSS 0.4%CVE-2025-27453MEDIUMCVE-2025-27453EPSS 0.4%CVE-2025-1709MEDIUMCVE-2025-1709EPSS 0.3%CVE-2025-27451MEDIUMCVE-2025-27451EPSS 0.3%CVE-2025-1711MEDIUMCVE-2025-1711EPSS 0.3%CVE-2025-27447HIGHCVE-2025-27447EPSS 0.3%CVE-2025-27455MEDIUMCVE-2025-27455EPSS 0.3%CVE-2025-27448MEDIUMCVE-2025-27448EPSS 0.3%CVE-2025-27450MEDIUMCVE-2025-27450EPSS 0.2%CVE-2025-41690HIGHEndress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditionsEPSS 0.2%CVE-2025-27457MEDIUMCVE-2025-27457EPSS 0.2%CVE-2025-27461HIGHCVE-2025-27461EPSS 0.2%