Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions
A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Promag 10 with HART
Vendor
Endress+Hauser
Product
Promag 10 with HART
Platforms
Unknown
Default status
unaffected
Promag 10 with HART · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
01.00.06
Unavailable
None listed
Promag 10 with IO-Link
Vendor
Endress+Hauser
Product
Promag 10 with IO-Link
Platforms
Unknown
Default status
unaffected
Promag 10 with IO-Link · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
01.00.02
Unavailable
None listed
Promag 10 with Modbus
Vendor
Endress+Hauser
Product
Promag 10 with Modbus
Platforms
Unknown
Default status
unaffected
Promag 10 with Modbus · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
01.00.06
Unavailable
None listed
Promass 10 with HART
Vendor
Endress+Hauser
Product
Promass 10 with HART
Platforms
Unknown
Default status
unaffected
Promass 10 with HART · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
01.00.06
Unavailable
None listed
Promass 10 with IO-Link
Vendor
Endress+Hauser
Product
Promass 10 with IO-Link
Platforms
Unknown
Default status
unaffected
Promass 10 with IO-Link · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
01.00.02
Unavailable
None listed
Promass 10 with Modbus
Vendor
Endress+Hauser
Product
Promass 10 with Modbus
Platforms
Unknown
Default status
unaffected
Promass 10 with Modbus · Scoped product and version facts