CVE-2025-15467: METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances

5 karet z 6 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2025-15467

EPSS 0.75 EPSS k 29. 10. 2026

Hodnocení závažnosti

9.8 CVSS 3.1 redhat-SADP

útok odkudkoli z internetu bez přípravy bez přihlášení bez zásahu uživatele
dopad plný únik dat úplná změna dat úplný výpadek
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 CVSS 3.1 CISA-ADP

útok odkudkoli z internetu bez přípravy bez přihlášení nutný zásah uživatele
dopad plný únik dat úplná změna dat úplný výpadek
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

SPOJENO PŘES CVE Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE

[FSA-202602] Festo AX OS versions 25.0.1.46 and 25.9.2.4, which are based on PLCnext by Phoenix Contact, used by the Festo product CEPE are affected by multiple OpenSSL vulnerabilities. The vulnerabilities are identified as CVE-2025-15467 and CVE-2025-69419. Attacks may be possible when maliciously crafted firmware, key files, PKCS#12 files, CMS/PKCS#7 content, or digitally signed objects are uploaded and processed by the affected system. In the device context, exploitation typically requires a…

EPSS 0.75 CVE-2025-15467 CVE-2025-69419 Festo Phoenix Contact OpenSSL výroba a průmysl DE

tg: zranitelnost tp: průmyslové systémy

· CERT@VDE · Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE

METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4

[VDE-2026-088] The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25. The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25 All other vulnerabilities are to be fixed in the upcoming releases.

EPSS 0.75 CVE-2025-15467 CVE-2025-69419 CVE-2026-0915 CVE-2026-33186 CVE-2026-33671 CVE-2026-39821 CVE-2026-4800 METTLER TOLEDO DE

tg: zranitelnost tp: dodavatelský řetězec

· CERT@VDE · METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4

Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01

[VDE-2026-049] Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.

EPSS 0.98 a dalších 3 CVE-2022-23498 CVE-2022-24812 CVE-2022-26148 CVE-2022-28391 CVE-2022-28660 CVE-2022-29170 CVE-2022-31097 CVE-2023-3128 CVE-2024-1442 CVE-2024-56406 CVE-2024-9264 CVE-2025-15467 CVE-2025-41115 CVE-2025-4674 CVE-2025-61732 CVE-2025-68121 CVE-2026-1229 Balluff DE

tg: zranitelnost tp: průmyslové systémy

· CERT@VDE · Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01

METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3

[VDE-2026-064] Multiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases. Notice: LabX Standard was formerly known as LabX Cloud Local.

EPSS 0.75 CVE-2025-15467 CVE-2025-58187 CVE-2025-69419 CVE-2026-0915 METTLER TOLEDO DE

tg: zranitelnost

· CERT@VDE · METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3