{ "document": { "acknowledgments": [ { "organization": "CERT@VDE", "summary": "coordination", "urls": [ "https://certvde.com" ] }, { "organization": "CodeWrights GmbH", "summary": "reported" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "notes": [ { "category": "summary", "text": "Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.", "title": "Summary" }, { "category": "description", "text": "Microprocessors from Intel and AMD using the x86 architecture and some microprocessors using the ARM, PowerPC, and MIPS architecture may be susceptible to a group of attacks named Meltdown and Spectre. These attacks may lead to a (complete) disclosure of information in the memory of systems. Integrity and availability are not affected, but information gained using these weaknesses may be used in further attacks.\n\nMeltdown [CVE-2017-5754] allows reading the complete memory of the attacked system using a specifically crafted executable code.\n\nSpectre [version 1: CVE-2017-5753, version 2: CVE-2017-5715] allows reading the memory of other processes using a specifically crafted executable code or dynamic code as used in web browsers.\n\nOnly those systems can be affected that allow the installation/execution of custom code or load dynamic contents from foreign/untrusted sources. If only the root/administrative user can install/execute custom code, no additional risk exists, as the root/administrative user can read the information without exploiting this vulnerability. If a web browser can be used to view foreign web pages, the Spectre attack must be considered.\n\nSystems that do not allow installation/execution of custom code are not affected.", "title": "Impact" }, { "title": "Mitigation", "text": "Make sure that no unauthorized access to the production environment is possible.\nAvoid using the above listed software with Windows administrator privileges if other users with lower privileges have access to the same software installation.", "category": "description" }, { "title": "Remediation", "category": "description", "text": "Endress+Hauser has provided the following updates with remediation of the vulnerability:\n\n- FieldCare Version 2.16\n- DeviceCare Version 1.07.05\n- Field Xpert Version 1.05.05\n- OPC UA Connectivity Server Version 1.3.7818\n\nFurther updates are currently not planned by Endress+Hauser." } ], "publisher": { "category": "vendor", "contact_details": "psirt@endress.com", "name": "Endress+Hauser AG", "namespace": "https://www.endress.com" }, "references": [ { "category": "external", "summary": "Endress+Hauser advisory overview at CERT@VDE", "url": "https://certvde.com/en/advisories/vendor/phoenixcontact/" }, { "category": "self", "summary": "VDE-2021-044: Endress+Hauser: Multiple products affected by log4net vulnerability - HTML", "url": "https://certvde.com/en/advisories/VDE-2021-044" }, { "summary": "VDE-2021-044: Endress+Hauser: Multiple products affected by log4net vulnerability - CSAF", "url": "https://endress-hauser.csaf-tp.certvde.com/.well-known/csaf/white/2022/vde-2021-044.json", "category": "self" } ], "title": "Endress+Hauser: Multiple products affected by log4net vulnerability", "tracking": { "aliases": [ "VDE-2021-044" ], "current_release_date": "2025-05-14T13:00:14.000Z", "generator": { "date": "2025-01-23T19:23:44.306Z", "engine": { "name": "Secvisogram", "version": "2.5.17" } }, "id": "VDE-2021-044", "initial_release_date": "2022-01-20T08:06:00.000Z", "revision_history": [ { "date": "2022-01-20T08:06:00.000Z", "number": "1", "summary": "Initial revision." }, { "date": "2025-02-12T16:48:47.000Z", "number": "2", "summary": "Fix: corrected self-reference, fixed version" }, { "number": "3", "summary": "Fix: added distribution", "date": "2025-05-14T13:00:14.000Z" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Endress+Hauser", "branches": [ { "category": "product_family", "name": "Software", "branches": [ { "name": "DeviceCare", "category": "product_name", "branches": [ { "name": "<=1.07.03", "category": "product_version_range", "product": { "product_id": "CSAFPID-51001", "name": "DeviceCare <=1.07.03", "product_identification_helper": { "model_numbers": [ "SFE100" ] } } }, { "name": "1.07.05", "category": "product_version", "product": { "name": "DeviceCare 1.07.05", "product_id": "CSAFPID-52001" } } ] }, { "name": "DTM for Cerabar / 5xB/7xB / HART", "category": "product_name", "branches": [ { "name": "<=1.67.0.805", "category": "product_version_range", "product": { "product_id": "CSAFPID-51002", "name": "DTM for Cerabar / 5xB/7xB / HART <=1.67.0.805" } } ] }, { "name": "DTM for CLD18 / CI / CDI", "category": "product_name", "branches": [ { "name": "<=1.2.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51003", "name": "DTM for CLD18 / CI / CDI <=1.2.0.0" } } ] }, { "name": "DTM for CM14 / CC / CDI", "category": "product_name", "branches": [ { "name": "<=1.2.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51004", "name": "DTM for CM14 / CC / CDI <=1.2.0.0" } } ] }, { "name": "DTM for CM14 / CI / CDI", "category": "product_name", "branches": [ { "name": "<=1.2.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51005", "name": "DTM for CM14 / CI / CDI <=1.2.0.0" } } ] }, { "name": "DTM for CM14 / DO / CDI", "category": "product_name", "branches": [ { "name": "<=1.2.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51006", "name": "DTM for CM14 / DO / CDI <=1.2.0.0" } } ] }, { "name": "DTM for CM14 / pH / CDI", "category": "product_name", "branches": [ { "name": "<=1.2.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51007", "name": "DTM for CM14 / pH / CDI <=1.2.0.0" } } ] }, { "name": "DTM for Deltabar / 5xB/7xB / HART", "category": "product_name", "branches": [ { "name": "<=1.67.0.805", "category": "product_version_range", "product": { "product_id": "CSAFPID-51008", "name": "DTM for Deltabar / 5xB/7xB / HART <=1.67.0.805" } } ] }, { "name": "DTM for Display / RID1x / CDI", "category": "product_name", "branches": [ { "name": "<=1.1.1.400", "category": "product_version_range", "product": { "product_id": "CSAFPID-51009", "name": "DTM for Display / RID1x / CDI <=1.1.1.400" } } ] }, { "name": "DTM for Dosimag / 5BH / CDI", "category": "product_name", "branches": [ { "name": "<=1.4.0.64", "category": "product_version_range", "product": { "product_id": "CSAFPID-51010", "name": "DTM for Dosimag / 5BH / CDI <=1.4.0.64" } } ] }, { "name": "DTM for Dosimag / 5BH / MR4", "category": "product_name", "branches": [ { "name": "<=1.4.1.78", "category": "product_version_range", "product": { "product_id": "CSAFPID-51011", "name": "DTM for Dosimag / 5BH / MR4 <=1.4.1.78" } } ] }, { "name": "DTM for Dosimass / 8BE / CDI", "category": "product_name", "branches": [ { "name": "<=1.4.0.112", "category": "product_version_range", "product": { "product_id": "CSAFPID-51012", "name": "DTM for Dosimass / 8BE / CDI <=1.4.0.112" } } ] }, { "name": "DTM for Dosimass / 8BE / MR4", "category": "product_name", "branches": [ { "name": "<=1.4.1.121", "category": "product_version_range", "product": { "product_id": "CSAFPID-51013", "name": "DTM for Dosimass / 8BE / MR4 <=1.4.1.121" } } ] }, { "name": "DTM for Ecograph T / RSG35 / CDI", "category": "product_name", "branches": [ { "name": "<=2.4.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51014", "name": "DTM for Ecograph T / RSG35 / CDI <=2.4.0.0" } } ] }, { "name": "DTM for EngyCal / RH33 / CDI", "category": "product_name", "branches": [ { "name": "<=1.7.0.5", "category": "product_version_range", "product": { "product_id": "CSAFPID-51015", "name": "DTM for EngyCal / RH33 / CDI <=1.7.0.5" } } ] }, { "name": "DTM for EngyCal / RS33 / CDI", "category": "product_name", "branches": [ { "name": "<=1.1.6.3352", "category": "product_version_range", "product": { "product_id": "CSAFPID-51016", "name": "DTM for EngyCal / RS33 / CDI <=1.1.6.3352" } } ] }, { "name": "DTM for Fieldgate /SFG500 / Profibus", "category": "product_name", "branches": [ { "name": "<=1.10.00", "category": "product_version_range", "product": { "product_id": "CSAFPID-51017", "name": "DTM for Fieldgate /SFG500 / Profibus <=1.10.00" } } ] }, { "name": "DTM for FXA195 / HART", "category": "product_name", "branches": [ { "name": "<=1.0.57", "category": "product_version_range", "product": { "product_id": "CSAFPID-51018", "name": "DTM for FXA195 / HART <=1.0.57" } } ] }, { "name": "DTM for Gammapilot 5x / FMG50 / HART", "category": "product_name", "branches": [ { "name": "<=1.43.0.1953", "category": "product_version_range", "product": { "product_id": "CSAFPID-51019", "name": "DTM for Gammapilot 5x / FMG50 / HART <=1.43.0.1953" } } ] }, { "name": "DTM for iTEMP / TMT142B / HART", "category": "product_name", "branches": [ { "name": "<=3.1.4.795", "category": "product_version_range", "product": { "product_id": "CSAFPID-51020", "name": "DTM for iTEMP / TMT142B / HART <=3.1.4.795" } } ] }, { "name": "DTM for iTEMP / TMT162 / HART", "category": "product_name", "branches": [ { "name": "<=1.13.132.5451", "category": "product_version_range", "product": { "product_id": "CSAFPID-51021", "name": "DTM for iTEMP / TMT162 / HART <=1.13.132.5451" } } ] }, { "name": "DTM for iTEMP / TMT71 / CDI", "category": "product_name", "branches": [ { "name": "<=1.13.18.5253", "category": "product_version_range", "product": { "product_id": "CSAFPID-51022", "name": "DTM for iTEMP / TMT71 / CDI <=1.13.18.5253" } } ] }, { "name": "DTM for iTEMP / TMT72 / HART", "category": "product_name", "branches": [ { "name": "<=1.13.258.2304", "category": "product_version_range", "product": { "product_id": "CSAFPID-51023", "name": "DTM for iTEMP / TMT72 / HART <=1.13.258.2304" } } ] }, { "name": "DTM for iTEMP / TMT82 / HART", "category": "product_name", "branches": [ { "name": "<=1.10.423.4213", "category": "product_version_range", "product": { "product_id": "CSAFPID-51024", "name": "DTM for iTEMP / TMT82 / HART <=1.10.423.4213" } }, { "name": "<=1.11.480.5368", "category": "product_version_range", "product": { "product_id": "CSAFPID-51025", "name": "DTM for iTEMP / TMT82 / HART <=1.11.480.5368" } } ] }, { "name": "DTM for Levelflex / FMP5x / FF", "category": "product_name", "branches": [ { "name": "<=1.11.0.1471", "category": "product_version_range", "product": { "product_id": "CSAFPID-51026", "name": "DTM for Levelflex / FMP5x / FF <=1.11.0.1471" } } ] }, { "name": "DTM for Levelflex / FMP 5x / HART", "category": "product_name", "branches": [ { "name": "<=1.10.1.2369", "category": "product_version_range", "product": { "product_id": "CSAFPID-51027", "name": "DTM for Levelflex / FMP 5x / HART <=1.10.1.2369" } } ] }, { "name": "DTM for Levelflex / FMP 5x / PA", "category": "product_name", "branches": [ { "name": "<=1.11.0.1017", "category": "product_version_range", "product": { "product_id": "CSAFPID-51028", "name": "DTM for Levelflex / FMP 5x / PA <=1.11.0.1017" } } ] }, { "name": "DTM for Liquiline CA80xx / CDI", "category": "product_name", "branches": [ { "name": "<=1.0.22.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51029", "name": "DTM for Liquiline CA80xx / CDI <=1.0.22.0" } } ] }, { "name": "DTM for Liquiline / CA80xx / DP", "category": "product_name", "branches": [ { "name": "<=1.11.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51030", "name": "DTM for Liquiline / CA80xx / DP <=1.11.0.0" } } ] }, { "name": "DTM for Liquiline / CM442 / CDI", "category": "product_name", "branches": [ { "name": "<=1.0.22.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51031", "name": "DTM for Liquiline / CM442 / CDI <=1.0.22.0" } } ] }, { "name": "DTM for Liquiline CM44x / CDI", "category": "product_name", "branches": [ { "name": "<=1.0.22.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51032", "name": "DTM for Liquiline CM44x / CDI <=1.0.22.0" } } ] }, { "name": "DTM for Liquiline / CM44x / DP", "category": "product_name", "branches": [ { "name": "<=1.11.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51033", "name": "DTM for Liquiline / CM44x / DP <=1.11.0.0" } } ] }, { "name": "DTM for Liquiline Compact / CM82 / HART", "category": "product_name", "branches": [ { "name": "<=1.2.0.796", "category": "product_version_range", "product": { "product_id": "CSAFPID-51034", "name": "DTM for Liquiline Compact / CM82 / HART <=1.2.0.796" } } ] }, { "name": "DTM for Liquiline Cond / CM42 / FF", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51035", "name": "DTM for Liquiline Cond / CM42 / FF <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline Cond / CM42 / HART", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51036", "name": "DTM for Liquiline Cond / CM42 / HART <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline Cond / CM42 / PA", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51037", "name": "DTM for Liquiline Cond / CM42 / PA <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline Oxygen / CM42 / FF", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51038", "name": "DTM for Liquiline Oxygen / CM42 / FF <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline Oxygen / CM42 / HART", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51039", "name": "DTM for Liquiline Oxygen / CM42 / HART <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline Oxygen / CM42 / PA", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51040", "name": "DTM for Liquiline Oxygen / CM42 / PA <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline pHORP / CM42 / FF", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51041", "name": "DTM for Liquiline pHORP / CM42 / FF <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline pHORP / CM42 / HART", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51042", "name": "DTM for Liquiline pHORP / CM42 / HART <=2.4.0.22" } } ] }, { "name": "DTM for Liquiline pHORP / CM42 / PA", "category": "product_name", "branches": [ { "name": "<=2.4.0.22", "category": "product_version_range", "product": { "product_id": "CSAFPID-51043", "name": "DTM for Liquiline pHORP / CM42 / PA <=2.4.0.22" } } ] }, { "name": "DTM for Liquistation / CSF22 / CDI", "category": "product_name", "branches": [ { "name": "<=1.0.22.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51044", "name": "DTM for Liquistation / CSF22 / CDI <=1.0.22.0" } } ] }, { "name": "DTM for Liquistation / CSF48 / CDI", "category": "product_name", "branches": [ { "name": "<=1.0.22.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51045", "name": "DTM for Liquistation / CSF48 / CDI <=1.0.22.0" } } ] }, { "name": "DTM for Liquistation CSFxx / CDI", "category": "product_name", "branches": [ { "name": "<=1.0.22.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51046", "name": "DTM for Liquistation CSFxx / CDI <=1.0.22.0" } } ] }, { "name": "DTM for Liquistation / CSFxx / DP", "category": "product_name", "branches": [ { "name": "<=1.11.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51047", "name": "DTM for Liquistation / CSFxx / DP <=1.11.0.0" } } ] }, { "name": "DTM for Memograph M / RSG45 / CDI", "category": "product_name", "branches": [ { "name": "<=2.4.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51048", "name": "DTM for Memograph M / RSG45 / CDI <=2.4.0.0" } } ] }, { "name": "DTM for Micropilot / FMR20 / HART", "category": "product_name", "branches": [ { "name": "<=1.9.0.358", "category": "product_version_range", "product": { "product_id": "CSAFPID-51049", "name": "DTM for Micropilot / FMR20 / HART <=1.9.0.358" } } ] }, { "name": "DTM for Micropilot / FMR5x / FF", "category": "product_name", "branches": [ { "name": "<=1.11.0.745", "category": "product_version_range", "product": { "product_id": "CSAFPID-51050", "name": "DTM for Micropilot / FMR5x / FF <=1.11.0.745" } } ] }, { "name": "DTM for Micropilot / FMR5x / HART", "category": "product_name", "branches": [ { "name": "<=1.10.0.913", "category": "product_version_range", "product": { "product_id": "CSAFPID-51051", "name": "DTM for Micropilot / FMR5x / HART <=1.10.0.913" } } ] }, { "name": "DTM for Micropilot / FMR5x / PA", "category": "product_name", "branches": [ { "name": "<=1.11.0.375", "category": "product_version_range", "product": { "product_id": "CSAFPID-51052", "name": "DTM for Micropilot / FMR5x / PA <=1.11.0.375" } } ] }, { "name": "DTM for Micropilot / FMR6x / HART", "category": "product_name", "branches": [ { "name": "<=1.10.0.807", "category": "product_version_range", "product": { "product_id": "CSAFPID-51053", "name": "DTM for Micropilot / FMR6x / HART <=1.10.0.807" } } ] }, { "name": "DTM for Promag 100 / 5x1B / DP", "category": "product_name", "branches": [ { "name": "<=1.7.0.86", "category": "product_version_range", "product": { "product_id": "CSAFPID-51054", "name": "DTM for Promag 100 / 5x1B / DP <=1.7.0.86" } } ] }, { "name": "DTM for Promag 100 / 5x1B / EIP", "category": "product_name", "branches": [ { "name": "<=1.6.0.175", "category": "product_version_range", "product": { "product_id": "CSAFPID-51055", "name": "DTM for Promag 100 / 5x1B / EIP <=1.6.0.175" } } ] }, { "name": "DTM for Promag 100 / 5x1B / EIP-CDIE", "category": "product_name", "branches": [ { "name": "<=1.5.0.174", "category": "product_version_range", "product": { "product_id": "CSAFPID-51056", "name": "DTM for Promag 100 / 5x1B / EIP-CDIE <=1.5.0.174" } } ] }, { "name": "DTM for Promag 100 / 5x1B / HART", "category": "product_name", "branches": [ { "name": "<=1.3.0.201", "category": "product_version_range", "product": { "product_id": "CSAFPID-51057", "name": "DTM for Promag 100 / 5x1B / HART <=1.3.0.201" } } ] }, { "name": "DTM for Promag 100 / 5x1B / MR4", "category": "product_name", "branches": [ { "name": "<=1.4.1.354", "category": "product_version_range", "product": { "product_id": "CSAFPID-51058", "name": "DTM for Promag 100 / 5x1B / MR4 <=1.4.1.354" } } ] }, { "name": "DTM for Promag 100 / 5x1B / MR4-CDIS", "category": "product_name", "branches": [ { "name": "<=1.4.1.354", "category": "product_version_range", "product": { "product_id": "CSAFPID-51059", "name": "DTM for Promag 100 / 5x1B / MR4-CDIS <=1.4.1.354" } } ] }, { "name": "DTM for Promag 100 / 5x1B / PNIO-CDIE", "category": "product_name", "branches": [ { "name": "<=1.6.0.37", "category": "product_version_range", "product": { "product_id": "CSAFPID-51060", "name": "DTM for Promag 100 / 5x1B / PNIO-CDIE <=1.6.0.37" } } ] }, { "name": "DTM for Promag 10 / 5xBB / HART", "category": "product_name", "branches": [ { "name": "<=1.76.0.184", "category": "product_version_range", "product": { "product_id": "CSAFPID-51061", "name": "DTM for Promag 10 / 5xBB / HART <=1.76.0.184" } } ] }, { "name": "DTM for Promag 10 / 5xBB / HART-CDIS", "category": "product_name", "branches": [ { "name": "<=1.76.0.184", "category": "product_version_range", "product": { "product_id": "CSAFPID-51062", "name": "DTM for Promag 10 / 5xBB / HART-CDIS <=1.76.0.184" } } ] }, { "name": "DTM for Promag 10 / 5xBB / MR4", "category": "product_name", "branches": [ { "name": "<=1.76.0.159", "category": "product_version_range", "product": { "product_id": "CSAFPID-51063", "name": "DTM for Promag 10 / 5xBB / MR4 <=1.76.0.159" } } ] }, { "name": "DTM for Promag 10 / 5xBB / MR4-CDIS", "category": "product_name", "branches": [ { "name": "<=1.76.0.159", "category": "product_version_range", "product": { "product_id": "CSAFPID-51064", "name": "DTM for Promag 10 / 5xBB / MR4-CDIS <=1.76.0.159" } } ] }, { "name": "DTM for Promag 200 / 5x2B / FF", "category": "product_name", "branches": [ { "name": "<=1.6.0.73", "category": "product_version_range", "product": { "product_id": "CSAFPID-51065", "name": "DTM for Promag 200 / 5x2B / FF <=1.6.0.73" } } ] }, { "name": "DTM for Promag 200 / 5x2B / HART", "category": "product_name", "branches": [ { "name": "<=1.5.0.219", "category": "product_version_range", "product": { "product_id": "CSAFPID-51066", "name": "DTM for Promag 200 / 5x2B / HART <=1.5.0.219" } } ] }, { "name": "DTM for Promag 200 / 5x2B / PA", "category": "product_name", "branches": [ { "name": "<=1.7.0.57", "category": "product_version_range", "product": { "product_id": "CSAFPID-51067", "name": "DTM for Promag 200 / 5x2B / PA <=1.7.0.57" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / DP", "category": "product_name", "branches": [ { "name": "<=1.11.0.65", "category": "product_version_range", "product": { "product_id": "CSAFPID-51068", "name": "DTM for Promag 300 500 / 5x3x 5x5x / DP <=1.11.0.65" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / EIP", "category": "product_name", "branches": [ { "name": "<=1.10.0.59", "category": "product_version_range", "product": { "product_id": "CSAFPID-51069", "name": "DTM for Promag 300 500 / 5x3x 5x5x / EIP <=1.10.0.59" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / EIP-CDIE", "category": "product_name", "branches": [ { "name": "<=1.10.0.59", "category": "product_version_range", "product": { "product_id": "CSAFPID-51070", "name": "DTM for Promag 300 500 / 5x3x 5x5x / EIP-CDIE <=1.10.0.59" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / FF", "category": "product_name", "branches": [ { "name": "<=1.9.0.122", "category": "product_version_range", "product": { "product_id": "CSAFPID-51071", "name": "DTM for Promag 300 500 / 5x3x 5x5x / FF <=1.9.0.122" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / HART", "category": "product_name", "branches": [ { "name": "<=1.39.0.285", "category": "product_version_range", "product": { "product_id": "CSAFPID-51072", "name": "DTM for Promag 300 500 / 5x3x 5x5x / HART <=1.39.0.285" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / MR4", "category": "product_name", "branches": [ { "name": "<=1.39.0.230", "category": "product_version_range", "product": { "product_id": "CSAFPID-51073", "name": "DTM for Promag 300 500 / 5x3x 5x5x / MR4 <=1.39.0.230" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / MR4-CDIE", "category": "product_name", "branches": [ { "name": "<=1.39.0.230", "category": "product_version_range", "product": { "product_id": "CSAFPID-51074", "name": "DTM for Promag 300 500 / 5x3x 5x5x / MR4-CDIE <=1.39.0.230" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / PA", "category": "product_name", "branches": [ { "name": "<=1.11.0.104", "category": "product_version_range", "product": { "product_id": "CSAFPID-51075", "name": "DTM for Promag 300 500 / 5x3x 5x5x / PA <=1.11.0.104" } }, { "name": "<=1.12.0.161", "category": "product_version_range", "product": { "product_id": "CSAFPID-51076", "name": "DTM for Promag 300 500 / 5x3x 5x5x / PA <=1.12.0.161" } } ] }, { "name": "DTM for Promag 300 500 / 5x3x 5x5x / PN-CDIE", "category": "product_name", "branches": [ { "name": "<=1.39.0.136", "category": "product_version_range", "product": { "product_id": "CSAFPID-51077", "name": "DTM for Promag 300 500 / 5x3x 5x5x / PN-CDIE <=1.39.0.136" } } ] }, { "name": "DTM for Promag 400 / 5x4Bxx / HART", "category": "product_name", "branches": [ { "name": "<=1.0.0.349", "category": "product_version_range", "product": { "product_id": "CSAFPID-51078", "name": "DTM for Promag 400 / 5x4Bxx / HART <=1.0.0.349" } } ] }, { "name": "DTM for Promag 400 / 5x4C / DP", "category": "product_name", "branches": [ { "name": "<=1.8.0.58", "category": "product_version_range", "product": { "product_id": "CSAFPID-51079", "name": "DTM for Promag 400 / 5x4C / DP <=1.8.0.58" } } ] }, { "name": "DTM for Promag 400 / 5x4C / EIP", "category": "product_name", "branches": [ { "name": "<=1.8.0.101", "category": "product_version_range", "product": { "product_id": "CSAFPID-51080", "name": "DTM for Promag 400 / 5x4C / EIP <=1.8.0.101" } }, { "name": "<=1.3.0.84", "category": "product_version_range", "product": { "product_id": "CSAFPID-51081", "name": "DTM for Promag 400 / 5x4C / EIP <=1.3.0.84" } } ] }, { "name": "DTM for Promag 400 / 5x4C / HART", "category": "product_name", "branches": [ { "name": "<=1.3.0.132", "category": "product_version_range", "product": { "product_id": "CSAFPID-51082", "name": "DTM for Promag 400 / 5x4C / HART <=1.3.0.132" } }, { "name": "<=1.39.0.276", "category": "product_version_range", "product": { "product_id": "CSAFPID-51083", "name": "DTM for Promag 400 / 5x4C / HART <=1.39.0.276" } } ] }, { "name": "DTM for Promag 400 / 5x4C / MR4", "category": "product_name", "branches": [ { "name": "<=1.39.0.191", "category": "product_version_range", "product": { "product_id": "CSAFPID-51084", "name": "DTM for Promag 400 / 5x4C / MR4 <=1.39.0.191" } } ] }, { "name": "DTM for Promag 400 / 5x4C / MR4-CDIE", "category": "product_name", "branches": [ { "name": "<=1.5.0.59", "category": "product_version_range", "product": { "product_id": "CSAFPID-51085", "name": "DTM for Promag 400 / 5x4C / MR4-CDIE <=1.5.0.59" } }, { "name": "<=1.10.0.148", "category": "product_version_range", "product": { "product_id": "CSAFPID-51086", "name": "DTM for Promag 400 / 5x4C / MR4-CDIE <=1.10.0.148" } } ] }, { "name": "DTM for Promag 400 / 5x4Cxx / HART", "category": "product_name", "branches": [ { "name": "<=1.0.0.32", "category": "product_version_range", "product": { "product_id": "CSAFPID-51087", "name": "DTM for Promag 400 / 5x4Cxx / HART <=1.0.0.32" } } ] }, { "name": "DTM for Promass 100 / 8x1B / DP", "category": "product_name", "branches": [ { "name": "<=1.7.0.141", "category": "product_version_range", "product": { "product_id": "CSAFPID-51088", "name": "DTM for Promass 100 / 8x1B / DP <=1.7.0.141" } } ] }, { "name": "DTM for Promass 100 / 8x1B / EIP", "category": "product_name", "branches": [ { "name": "<=1.6.0.463", "category": "product_version_range", "product": { "product_id": "CSAFPID-51089", "name": "DTM for Promass 100 / 8x1B / EIP <=1.6.0.463" } } ] }, { "name": "DTM for Promass 100 / 8x1B / EIP-CDIE", "category": "product_name", "branches": [ { "name": "<=1.5.0.463", "category": "product_version_range", "product": { "product_id": "CSAFPID-51090", "name": "DTM for Promass 100 / 8x1B / EIP-CDIE <=1.5.0.463" } } ] }, { "name": "DTM for Promass 100 / 8x1B / HART", "category": "product_name", "branches": [ { "name": "<=1.4.0.282", "category": "product_version_range", "product": { "product_id": "CSAFPID-51091", "name": "DTM for Promass 100 / 8x1B / HART <=1.4.0.282" } } ] }, { "name": "DTM for Promass 100 / 8x1B / MB", "category": "product_name", "branches": [ { "name": "<=1.4.1.519", "category": "product_version_range", "product": { "product_id": "CSAFPID-51092", "name": "DTM for Promass 100 / 8x1B / MB <=1.4.1.519" } } ] }, { "name": "DTM for Promass 100 / 8x1B / PNIO-CDIE", "category": "product_name", "branches": [ { "name": "<=1.6.0.70", "category": "product_version_range", "product": { "product_id": "CSAFPID-51093", "name": "DTM for Promass 100 / 8x1B / PNIO-CDIE <=1.6.0.70" } } ] }, { "name": "DTM for Promass 100 / 8x1Bxx / MB", "category": "product_name", "branches": [ { "name": "<=1.0.0.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51094", "name": "DTM for Promass 100 / 8x1Bxx / MB <=1.0.0.0" } }, { "name": "<=1.4.0.513", "category": "product_version_range", "product": { "product_id": "CSAFPID-51095", "name": "DTM for Promass 100 / 8x1Bxx / MB <=1.4.0.513" } } ] }, { "name": "DTM for Promass 100 / 8x1Bxx / MR4", "category": "product_name", "branches": [ { "name": "<=1.2.0.476", "category": "product_version_range", "product": { "product_id": "CSAFPID-51096", "name": "DTM for Promass 100 / 8x1Bxx / MR4 <=1.2.0.476" } } ] }, { "name": "DTM for Promass 10 / 8xBB / HART", "category": "product_name", "branches": [ { "name": "<=1.76.0.271", "category": "product_version_range", "product": { "product_id": "CSAFPID-51097", "name": "DTM for Promass 10 / 8xBB / HART <=1.76.0.271" } } ] }, { "name": "DTM for Promass 10 / 8xBB / HART-CDIS", "category": "product_name", "branches": [ { "name": "<=1.76.0.271", "category": "product_version_range", "product": { "product_id": "CSAFPID-51098", "name": "DTM for Promass 10 / 8xBB / HART-CDIS <=1.76.0.271" } } ] }, { "name": "DTM for Promass 10 / 8xBB / MR4", "category": "product_name", "branches": [ { "name": "<=1.76.0.158", "category": "product_version_range", "product": { "product_id": "CSAFPID-51099", "name": "DTM for Promass 10 / 8xBB / MR4 <=1.76.0.158" } } ] }, { "name": "DTM for Promass 10 / 8xBB / MR4-CDIS", "category": "product_name", "branches": [ { "name": "<=1.76.0.158", "category": "product_version_range", "product": { "product_id": "CSAFPID-51100", "name": "DTM for Promass 10 / 8xBB / MR4-CDIS <=1.76.0.158" } } ] }, { "name": "DTM for Promass 200 / 8x2B / FF", "category": "product_name", "branches": [ { "name": "<=1.3.0.150", "category": "product_version_range", "product": { "product_id": "CSAFPID-51101", "name": "DTM for Promass 200 / 8x2B / FF <=1.3.0.150" } } ] }, { "name": "DTM for Promass 200 / 8x2B / HART", "category": "product_name", "branches": [ { "name": "<=1.5.0.1133", "category": "product_version_range", "product": { "product_id": "CSAFPID-51102", "name": "DTM for Promass 200 / 8x2B / HART <=1.5.0.1133" } } ] }, { "name": "DTM for Promass 200 / 8x2B / PA", "category": "product_name", "branches": [ { "name": "<=1.7.0.236", "category": "product_version_range", "product": { "product_id": "CSAFPID-51103", "name": "DTM for Promass 200 / 8x2B / PA <=1.7.0.236" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / DP", "category": "product_name", "branches": [ { "name": "<=1.11.0.93", "category": "product_version_range", "product": { "product_id": "CSAFPID-51104", "name": "DTM for Promass 300 500 / 8x3x 8x5x / DP <=1.11.0.93" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / EIP", "category": "product_name", "branches": [ { "name": "<=1.10.0.94", "category": "product_version_range", "product": { "product_id": "CSAFPID-51105", "name": "DTM for Promass 300 500 / 8x3x 8x5x / EIP <=1.10.0.94" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / EIP-CDIE", "category": "product_name", "branches": [ { "name": "<=1.10.0.94", "category": "product_version_range", "product": { "product_id": "CSAFPID-51106", "name": "DTM for Promass 300 500 / 8x3x 8x5x / EIP-CDIE <=1.10.0.94" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / FF", "category": "product_name", "branches": [ { "name": "<=1.9.0.197", "category": "product_version_range", "product": { "product_id": "CSAFPID-51107", "name": "DTM for Promass 300 500 / 8x3x 8x5x / FF <=1.9.0.197" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / HART", "category": "product_name", "branches": [ { "name": "<=1.39.0.646", "category": "product_version_range", "product": { "product_id": "CSAFPID-51108", "name": "DTM for Promass 300 500 / 8x3x 8x5x / HART <=1.39.0.646" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / MR4", "category": "product_name", "branches": [ { "name": "<=1.39.0.289", "category": "product_version_range", "product": { "product_id": "CSAFPID-51109", "name": "DTM for Promass 300 500 / 8x3x 8x5x / MR4 <=1.39.0.289" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / MR4-CDIE", "category": "product_name", "branches": [ { "name": "<=1.39.0.289", "category": "product_version_range", "product": { "product_id": "CSAFPID-51110", "name": "DTM for Promass 300 500 / 8x3x 8x5x / MR4-CDIE <=1.39.0.289" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / PA", "category": "product_name", "branches": [ { "name": "<=1.12.0.193", "category": "product_version_range", "product": { "product_id": "CSAFPID-51111", "name": "DTM for Promass 300 500 / 8x3x 8x5x / PA <=1.12.0.193" } } ] }, { "name": "DTM for Promass 300 500 / 8x3x 8x5x / PN-CDIE", "category": "product_name", "branches": [ { "name": "<=1.39.0.222", "category": "product_version_range", "product": { "product_id": "CSAFPID-51112", "name": "DTM for Promass 300 500 / 8x3x 8x5x / PN-CDIE <=1.39.0.222" } } ] }, { "name": "DTM for Proservo / NMS8x / HART", "category": "product_name", "branches": [ { "name": "<=1.9.2.887", "category": "product_version_range", "product": { "product_id": "CSAFPID-51113", "name": "DTM for Proservo / NMS8x / HART <=1.9.2.887" } } ] }, { "name": "DTM for Prosonic Flow 100 / 9E1B / CDI", "category": "product_name", "branches": [ { "name": "<=1.10.0.172", "category": "product_version_range", "product": { "product_id": "CSAFPID-51114", "name": "DTM for Prosonic Flow 100 / 9E1B / CDI <=1.10.0.172" } } ] }, { "name": "DTM for Prosonic Flow 100 / 9E1B / HART", "category": "product_name", "branches": [ { "name": "<=1.10.0.151", "category": "product_version_range", "product": { "product_id": "CSAFPID-51115", "name": "DTM for Prosonic Flow 100 / 9E1B / HART <=1.10.0.151" } } ] }, { "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / HART", "category": "product_name", "branches": [ { "name": "<=1.45.0.327", "category": "product_version_range", "product": { "product_id": "CSAFPID-51116", "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / HART <=1.45.0.327" } } ] }, { "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / MR4", "category": "product_name", "branches": [ { "name": "<=1.45.0.128", "category": "product_version_range", "product": { "product_id": "CSAFPID-51117", "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / MR4 <=1.45.0.128" } } ] }, { "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / MR4-CDIE", "category": "product_name", "branches": [ { "name": "<=1.38.0.88", "category": "product_version_range", "product": { "product_id": "CSAFPID-51118", "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / MR4-CDIE <=1.38.0.88" } }, { "name": "<=1.45.0.128", "category": "product_version_range", "product": { "product_id": "CSAFPID-51119", "name": "DTM for Prosonic Flow 300 500 / 9x3x 9x5x / MR4-CDIE <=1.45.0.128" } } ] }, { "name": "DTM for Prosonic Flow B 200 / 9B2B / HART", "category": "product_name", "branches": [ { "name": "<=1.6.0.800", "category": "product_version_range", "product": { "product_id": "CSAFPID-51120", "name": "DTM for Prosonic Flow B 200 / 9B2B / HART <=1.6.0.800" } } ] }, { "name": "DTM for Prothermo / NMT8x / HART", "category": "product_name", "branches": [ { "name": "<=1.73.0.317", "category": "product_version_range", "product": { "product_id": "CSAFPID-51121", "name": "DTM for Prothermo / NMT8x / HART <=1.73.0.317" } } ] }, { "name": "DTM for Prowirl 200 / 7x2B / FF", "category": "product_name", "branches": [ { "name": "<=1.11.0.174", "category": "product_version_range", "product": { "product_id": "CSAFPID-51122", "name": "DTM for Prowirl 200 / 7x2B / FF <=1.11.0.174" } } ] }, { "name": "DTM for Prowirl 200 / 7x2B / HART", "category": "product_name", "branches": [ { "name": "<=1.12.0.537", "category": "product_version_range", "product": { "product_id": "CSAFPID-51123", "name": "DTM for Prowirl 200 / 7x2B / HART <=1.12.0.537" } } ] }, { "name": "DTM for Prowirl 200 / 7x2Bxx / PA", "category": "product_name", "branches": [ { "name": "<=1.11.0.135", "category": "product_version_range", "product": { "product_id": "CSAFPID-51124", "name": "DTM for Prowirl 200 / 7x2Bxx / PA <=1.11.0.135" } } ] }, { "name": "DTM for RA33 / CDI", "category": "product_name", "branches": [ { "name": "<=1.1.6.3352", "category": "product_version_range", "product": { "product_id": "CSAFPID-51125", "name": "DTM for RA33 / CDI <=1.1.6.3352" } } ] }, { "name": "DTM for Tank Gauging Radar / NMR8x / HART", "category": "product_name", "branches": [ { "name": "<=1.9.2.799", "category": "product_version_range", "product": { "product_id": "CSAFPID-51126", "name": "DTM for Tank Gauging Radar / NMR8x / HART <=1.9.2.799" } } ] }, { "name": "DTM for Tank Side Monitor / NRF8x / HART", "category": "product_name", "branches": [ { "name": "<=1.9.2.669", "category": "product_version_range", "product": { "product_id": "CSAFPID-51127", "name": "DTM for Tank Side Monitor / NRF8x / HART <=1.9.2.669" } } ] }, { "name": "DTM for t-mass 150 / 6xABxx / HART", "category": "product_name", "branches": [ { "name": "<=1.0.0.162", "category": "product_version_range", "product": { "product_id": "CSAFPID-51128", "name": "DTM for t-mass 150 / 6xABxx / HART <=1.0.0.162" } } ] }, { "name": "DTM for t-mass 150 L T 150 / 6xAB / HART", "category": "product_name", "branches": [ { "name": "<=1.2.0.42", "category": "product_version_range", "product": { "product_id": "CSAFPID-51129", "name": "DTM for t-mass 150 L T 150 / 6xAB / HART <=1.2.0.42" } } ] }, { "name": "DTM for t-mass 300 500 / 6x3B 6x5B / HART", "category": "product_name", "branches": [ { "name": "<=1.45.0.280", "category": "product_version_range", "product": { "product_id": "CSAFPID-51130", "name": "DTM for t-mass 300 500 / 6x3B 6x5B / HART <=1.45.0.280" } } ] }, { "name": "DTM for t-mass 300 500 / 6x3B 6x5B / MR4", "category": "product_name", "branches": [ { "name": "<=1.45.0.127", "category": "product_version_range", "product": { "product_id": "CSAFPID-51131", "name": "DTM for t-mass 300 500 / 6x3B 6x5B / MR4 <=1.45.0.127" } } ] }, { "name": "DTM for t-mass 300 500 / 6x3B 6x5B / MR4-CDIE", "category": "product_name", "branches": [ { "name": "<=1.45.0.127", "category": "product_version_range", "product": { "product_id": "CSAFPID-51132", "name": "DTM for t-mass 300 500 / 6x3B 6x5B / MR4-CDIE <=1.45.0.127" } } ] }, { "name": "DTM for TrustSens / TM371-TM372 / HART", "category": "product_name", "branches": [ { "name": "<=1.11.301.4871", "category": "product_version_range", "product": { "product_id": "CSAFPID-51133", "name": "DTM for TrustSens / TM371-TM372 / HART <=1.11.301.4871" } } ] }, { "name": "DTM library for SWA50", "category": "product_name", "branches": [ { "name": "<=1.0.2.4", "category": "product_version_range", "product": { "product_id": "CSAFPID-51134", "name": "DTM library for SWA50 <=1.0.2.4" } } ] }, { "name": "DTM library for SWA70", "category": "product_name", "branches": [ { "name": "<=1.0.2.4", "category": "product_version_range", "product": { "product_id": "CSAFPID-51135", "name": "DTM library for SWA70 <=1.0.2.4" } } ] }, { "name": "DTM library for SWG70 / WirelessHART", "category": "product_name", "branches": [ { "name": "<=1.0.2.4", "category": "product_version_range", "product": { "product_id": "CSAFPID-51136", "name": "DTM library for SWG70 / WirelessHART <=1.0.2.4" } } ] }, { "name": "FieldCare", "category": "product_name", "branches": [ { "name": "<=2.15.01", "category": "product_version_range", "product": { "product_id": "CSAFPID-51137", "name": "FieldCare <=2.15.01", "product_identification_helper": { "model_numbers": [ "SFE500" ] } } }, { "name": "2.16", "category": "product_version", "product": { "name": "FieldCare 2.16", "product_id": "CSAFPID-52002" } } ] }, { "name": "Field Xpert", "category": "product_name", "branches": [ { "name": "<=1.05.03", "category": "product_version_range", "product": { "product_id": "CSAFPID-51138", "name": "Field Xpert <=1.05.03", "product_identification_helper": { "model_numbers": [ "SMT50", "SMT70", "SMT77" ] } } }, { "name": "1.05.05", "category": "product_version", "product": { "name": "Field Xpert 1.05.05", "product_id": "CSAFPID-52003" } } ] }, { "name": "HoP DTM", "category": "product_name", "branches": [ { "name": "<=1.0.2", "category": "product_version_range", "product": { "product_id": "CSAFPID-51139", "name": "HoP DTM <=1.0.2" } } ] }, { "name": "iDTM FF", "category": "product_name", "branches": [ { "name": "<=2.00.289", "category": "product_version_range", "product": { "product_id": "CSAFPID-51140", "name": "iDTM FF <=2.00.289" } } ] }, { "name": "iDTM HART", "category": "product_name", "branches": [ { "name": "<=2.00.289", "category": "product_version_range", "product": { "product_id": "CSAFPID-51141", "name": "iDTM HART <=2.00.289" } } ] }, { "name": "IO-Link IODD Interpreter DTM", "category": "product_name", "branches": [ { "name": "<=3.12.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51142", "name": "IO-Link IODD Interpreter DTM <=3.12.0" } } ] }, { "name": "OPC Server for SWG70", "category": "product_name", "branches": [ { "name": "<=1.00.01", "category": "product_version_range", "product": { "product_id": "CSAFPID-51143", "name": "OPC Server for SWG70 <=1.00.01" } } ] }, { "name": "OPC UA Connectivity Server", "category": "product_name", "branches": [ { "name": "<=1.3.7817", "category": "product_version_range", "product": { "product_id": "CSAFPID-51144", "name": "OPC UA Connectivity Server <=1.3.7817" } }, { "name": "1.3.7818", "category": "product_version", "product": { "name": "OPC UA Connectivity Server 1.3.7818", "product_id": "CSAFPID-52004" } } ] } ] } ] } ], "product_groups": [ { "group_id": "CSAFGID-0001", "summary": "affected product.", "product_ids": [ "CSAFPID-51001", "CSAFPID-51002", "CSAFPID-51003", "CSAFPID-51004", "CSAFPID-51005", "CSAFPID-51006", "CSAFPID-51007", "CSAFPID-51008", "CSAFPID-51009", "CSAFPID-51010", "CSAFPID-51011", "CSAFPID-51012", "CSAFPID-51013", "CSAFPID-51014", "CSAFPID-51015", "CSAFPID-51016", "CSAFPID-51017", "CSAFPID-51018", "CSAFPID-51019", "CSAFPID-51020", "CSAFPID-51021", "CSAFPID-51022", "CSAFPID-51023", "CSAFPID-51024", "CSAFPID-51025", "CSAFPID-51026", "CSAFPID-51027", "CSAFPID-51028", "CSAFPID-51029", "CSAFPID-51030", "CSAFPID-51031", "CSAFPID-51032", "CSAFPID-51033", "CSAFPID-51034", "CSAFPID-51035", "CSAFPID-51036", "CSAFPID-51037", "CSAFPID-51038", "CSAFPID-51039", "CSAFPID-51040", "CSAFPID-51041", "CSAFPID-51042", "CSAFPID-51043", "CSAFPID-51044", "CSAFPID-51045", "CSAFPID-51046", "CSAFPID-51047", "CSAFPID-51048", "CSAFPID-51049", "CSAFPID-51050", "CSAFPID-51051", "CSAFPID-51052", "CSAFPID-51053", "CSAFPID-51054", "CSAFPID-51055", "CSAFPID-51056", "CSAFPID-51057", "CSAFPID-51058", "CSAFPID-51059", "CSAFPID-51060", "CSAFPID-51061", "CSAFPID-51062", "CSAFPID-51063", "CSAFPID-51064", "CSAFPID-51065", "CSAFPID-51066", "CSAFPID-51067", "CSAFPID-51068", "CSAFPID-51069", "CSAFPID-51070", "CSAFPID-51071", "CSAFPID-51072", "CSAFPID-51073", "CSAFPID-51074", "CSAFPID-51075", "CSAFPID-51076", "CSAFPID-51077", "CSAFPID-51078", "CSAFPID-51079", "CSAFPID-51080", "CSAFPID-51081", "CSAFPID-51082", "CSAFPID-51083", "CSAFPID-51084", "CSAFPID-51085", "CSAFPID-51086", "CSAFPID-51087", "CSAFPID-51088", "CSAFPID-51089", "CSAFPID-51090", "CSAFPID-51091", "CSAFPID-51092", "CSAFPID-51093", "CSAFPID-51094", "CSAFPID-51095", "CSAFPID-51096", "CSAFPID-51097", "CSAFPID-51098", "CSAFPID-51099", "CSAFPID-51100", "CSAFPID-51101", "CSAFPID-51102", "CSAFPID-51103", "CSAFPID-51104", "CSAFPID-51105", "CSAFPID-51106", "CSAFPID-51107", "CSAFPID-51108", "CSAFPID-51109", "CSAFPID-51110", "CSAFPID-51111", "CSAFPID-51112", "CSAFPID-51113", "CSAFPID-51114", "CSAFPID-51115", "CSAFPID-51116", "CSAFPID-51117", "CSAFPID-51118", "CSAFPID-51119", "CSAFPID-51120", "CSAFPID-51121", "CSAFPID-51122", "CSAFPID-51123", "CSAFPID-51124", "CSAFPID-51125", "CSAFPID-51126", "CSAFPID-51127", "CSAFPID-51128", "CSAFPID-51129", "CSAFPID-51130", "CSAFPID-51131", "CSAFPID-51132", "CSAFPID-51133", "CSAFPID-51134", "CSAFPID-51135", "CSAFPID-51136", "CSAFPID-51137", "CSAFPID-51138", "CSAFPID-51139", "CSAFPID-51140", "CSAFPID-51141", "CSAFPID-51142", "CSAFPID-51143", "CSAFPID-51144" ] }, { "group_id": "CSAFGID-0004", "summary": "fixed products", "product_ids": [ "CSAFPID-52001", "CSAFPID-52002", "CSAFPID-52003", "CSAFPID-52004" ] } ] }, "vulnerabilities": [ { "cve": "CVE-2017-5753", "title": "CVE-2017-5753", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "notes": [ { "title": "Vulnerability Description", "category": "description", "text": "Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files." } ], "product_status": { "known_affected": [ "CSAFPID-51001", "CSAFPID-51002", "CSAFPID-51003", "CSAFPID-51004", "CSAFPID-51005", "CSAFPID-51006", "CSAFPID-51007", "CSAFPID-51008", "CSAFPID-51009", "CSAFPID-51010", "CSAFPID-51011", "CSAFPID-51012", "CSAFPID-51013", "CSAFPID-51014", "CSAFPID-51015", "CSAFPID-51016", "CSAFPID-51017", "CSAFPID-51018", "CSAFPID-51019", "CSAFPID-51020", "CSAFPID-51021", "CSAFPID-51022", "CSAFPID-51023", "CSAFPID-51024", "CSAFPID-51025", "CSAFPID-51026", "CSAFPID-51027", "CSAFPID-51028", "CSAFPID-51029", "CSAFPID-51030", "CSAFPID-51031", "CSAFPID-51032", "CSAFPID-51033", "CSAFPID-51034", "CSAFPID-51035", "CSAFPID-51036", "CSAFPID-51037", "CSAFPID-51038", "CSAFPID-51039", "CSAFPID-51040", "CSAFPID-51041", "CSAFPID-51042", "CSAFPID-51043", "CSAFPID-51044", "CSAFPID-51045", "CSAFPID-51046", "CSAFPID-51047", "CSAFPID-51048", "CSAFPID-51049", "CSAFPID-51050", "CSAFPID-51051", "CSAFPID-51052", "CSAFPID-51053", "CSAFPID-51054", "CSAFPID-51055", "CSAFPID-51056", "CSAFPID-51057", "CSAFPID-51058", "CSAFPID-51059", "CSAFPID-51060", "CSAFPID-51061", "CSAFPID-51062", "CSAFPID-51063", "CSAFPID-51064", "CSAFPID-51065", "CSAFPID-51066", "CSAFPID-51067", "CSAFPID-51068", "CSAFPID-51069", "CSAFPID-51070", "CSAFPID-51071", "CSAFPID-51072", "CSAFPID-51073", "CSAFPID-51074", "CSAFPID-51075", "CSAFPID-51076", "CSAFPID-51077", "CSAFPID-51078", "CSAFPID-51079", "CSAFPID-51080", "CSAFPID-51081", "CSAFPID-51082", "CSAFPID-51083", "CSAFPID-51084", "CSAFPID-51085", "CSAFPID-51086", "CSAFPID-51087", "CSAFPID-51088", "CSAFPID-51089", "CSAFPID-51090", "CSAFPID-51091", "CSAFPID-51092", "CSAFPID-51093", "CSAFPID-51094", "CSAFPID-51095", "CSAFPID-51096", "CSAFPID-51097", "CSAFPID-51098", "CSAFPID-51099", "CSAFPID-51100", "CSAFPID-51101", "CSAFPID-51102", "CSAFPID-51103", "CSAFPID-51104", "CSAFPID-51105", "CSAFPID-51106", "CSAFPID-51107", "CSAFPID-51108", "CSAFPID-51109", "CSAFPID-51110", "CSAFPID-51111", "CSAFPID-51112", "CSAFPID-51113", "CSAFPID-51114", "CSAFPID-51115", "CSAFPID-51116", "CSAFPID-51117", "CSAFPID-51118", "CSAFPID-51119", "CSAFPID-51120", "CSAFPID-51121", "CSAFPID-51122", "CSAFPID-51123", "CSAFPID-51124", "CSAFPID-51125", "CSAFPID-51126", "CSAFPID-51127", "CSAFPID-51128", "CSAFPID-51129", "CSAFPID-51130", "CSAFPID-51131", "CSAFPID-51132", "CSAFPID-51133", "CSAFPID-51134", "CSAFPID-51135", "CSAFPID-51136", "CSAFPID-51137", "CSAFPID-51138", "CSAFPID-51139", "CSAFPID-51140", "CSAFPID-51141", "CSAFPID-51142", "CSAFPID-51143", "CSAFPID-51144" ], "fixed": [ "CSAFPID-52001", "CSAFPID-52002", "CSAFPID-52003", "CSAFPID-52004" ] }, "remediations": [ { "details": "Make sure that no unauthorized access to the production environment is possible.\nAvoid using the above listed software with Windows administrator privileges if other users with lower privileges have access to the same software installation.", "category": "mitigation", "group_ids": [ "CSAFGID-0001" ] }, { "category": "vendor_fix", "details": "Endress+Hauser has provided the following updates with remediation of the vulnerability:\n\n- FieldCare Version 2.16\n- DeviceCare Version 1.07.05\n- Field Xpert Version 1.05.05\n- OPC UA Connectivity Server Version 1.3.7818\n\nFurther updates are currently not planned by Endress+Hauser.", "group_ids": [ "CSAFGID-0001" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "temporalScore": 9.8, "temporalSeverity": "CRITICAL", "environmentalScore": 9.8, "environmentalSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "products": [ "CSAFPID-51001", "CSAFPID-51002", "CSAFPID-51003", "CSAFPID-51004", "CSAFPID-51005", "CSAFPID-51006", "CSAFPID-51007", "CSAFPID-51008", "CSAFPID-51009", "CSAFPID-51010", "CSAFPID-51011", "CSAFPID-51012", "CSAFPID-51013", "CSAFPID-51014", "CSAFPID-51015", "CSAFPID-51016", "CSAFPID-51017", "CSAFPID-51018", "CSAFPID-51019", "CSAFPID-51020", "CSAFPID-51021", "CSAFPID-51022", "CSAFPID-51023", "CSAFPID-51024", "CSAFPID-51025", "CSAFPID-51026", "CSAFPID-51027", "CSAFPID-51028", "CSAFPID-51029", "CSAFPID-51030", "CSAFPID-51031", "CSAFPID-51032", "CSAFPID-51033", "CSAFPID-51034", "CSAFPID-51035", "CSAFPID-51036", "CSAFPID-51037", "CSAFPID-51038", "CSAFPID-51039", "CSAFPID-51040", "CSAFPID-51041", "CSAFPID-51042", "CSAFPID-51043", "CSAFPID-51044", "CSAFPID-51045", "CSAFPID-51046", "CSAFPID-51047", "CSAFPID-51048", "CSAFPID-51049", "CSAFPID-51050", "CSAFPID-51051", "CSAFPID-51052", "CSAFPID-51053", "CSAFPID-51054", "CSAFPID-51055", "CSAFPID-51056", "CSAFPID-51057", "CSAFPID-51058", "CSAFPID-51059", "CSAFPID-51060", "CSAFPID-51061", "CSAFPID-51062", "CSAFPID-51063", "CSAFPID-51064", "CSAFPID-51065", "CSAFPID-51066", "CSAFPID-51067", "CSAFPID-51068", "CSAFPID-51069", "CSAFPID-51070", "CSAFPID-51071", "CSAFPID-51072", "CSAFPID-51073", "CSAFPID-51074", "CSAFPID-51075", "CSAFPID-51076", "CSAFPID-51077", "CSAFPID-51078", "CSAFPID-51079", "CSAFPID-51080", "CSAFPID-51081", "CSAFPID-51082", "CSAFPID-51083", "CSAFPID-51084", "CSAFPID-51085", "CSAFPID-51086", "CSAFPID-51087", "CSAFPID-51088", "CSAFPID-51089", "CSAFPID-51090", "CSAFPID-51091", "CSAFPID-51092", "CSAFPID-51093", "CSAFPID-51094", "CSAFPID-51095", "CSAFPID-51096", "CSAFPID-51097", "CSAFPID-51098", "CSAFPID-51099", "CSAFPID-51100", "CSAFPID-51101", "CSAFPID-51102", "CSAFPID-51103", "CSAFPID-51104", "CSAFPID-51105", "CSAFPID-51106", "CSAFPID-51107", "CSAFPID-51108", "CSAFPID-51109", "CSAFPID-51110", "CSAFPID-51111", "CSAFPID-51112", "CSAFPID-51113", "CSAFPID-51114", "CSAFPID-51115", "CSAFPID-51116", "CSAFPID-51117", "CSAFPID-51118", "CSAFPID-51119", "CSAFPID-51120", "CSAFPID-51121", "CSAFPID-51122", "CSAFPID-51123", "CSAFPID-51124", "CSAFPID-51125", "CSAFPID-51126", "CSAFPID-51127", "CSAFPID-51128", "CSAFPID-51129", "CSAFPID-51130", "CSAFPID-51131", "CSAFPID-51132", "CSAFPID-51133", "CSAFPID-51134", "CSAFPID-51135", "CSAFPID-51136", "CSAFPID-51137", "CSAFPID-51138", "CSAFPID-51139", "CSAFPID-51140", "CSAFPID-51141", "CSAFPID-51142", "CSAFPID-51143", "CSAFPID-51144" ] } ] } ] }