Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-3323

VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VEGA Grieshaber VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC UA (Ethernet-APL)

Default version status: unaffected

  • 1.0.0affected

VEGA Grieshaber VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC UA (Ethernet-APL)

Default version status: unaffected

  • 1.1.0affected

References