CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 02:35.
Filter
1 aktiv1 Advisories gefunden
VDE-2024-041
Endress+Hauser: Multiple products are vulnerable to code injection
Veröffentlicht
10. September 2024
Letzte Aktualisierung
10. September 2024
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Echo Curve Viewer is an utility used for offline visualization of previously recorded envelope curve data. Envelope curve records are exported from other Endress+Hauser software products like FieldCare as .curves files. Echo Curve Viewer opens .curves files and displays their contents. The .curves files contain device- specific C# calculation scripts as .cs files, that are needed for the interpretation of certain curve record types. Echo Curve Viewer loads .curves files and executes the contained C# code.
Zusammenfassung der Gegenmaßnahmen
- For standalone Echo Curve Viewer installations, download and install Echo Curve Viewer version >=6.00.00 from the Endress+Hauser Software Portal - For bundled installations with FieldCare SFE500, download and install FieldCare SFE500 Package version >= 1.40.1 from the Endress+Hauser Software Portal external link - For Field Xpert Devices, the required update is installed automatically during startup. This requires a working internet connection and (under certain circumstances) a valid maintenance period and/or a connection to the E+H Netilion Cloud. Please refer to the Field Xpert documentation for details regarding the update mechanism.
Revisionshistorie (1)
Erstveröffentlichung — 10. September 2024
Initial revision.