CVE-2026-3323 — VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devices

CVE-2026-3323

VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devices PUBLISHED

Description (CNA)

An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.

Affected (CNA)

Vendor / product	Versions
VEGA Grieshaber / VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC UA (Ethernet-APL)	affected 1.0.0
VEGA Grieshaber / VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC UA (Ethernet-APL)	affected 1.1.0

CWE

CWE-306

References

https://certvde.com/en/advisories/VDE-2026-016
https://vega.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-016.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.