Skip to main content

FDI Package Library CVE-2026-9593

| EUVDEUVD-2026-52188 HIGH
Uncontrolled Search Path Element (CWE-427)
2026-08-03 CERTVDE GHSA-853j-hcj8-c5p2
Authentication Bypass Fdi Package Library
8.4
CVSS 4.0 · Vendor: CERTVDE
Share

Severity by source

Vendor (CERTVDE) PRIMARY
8.4 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.7 MEDIUM

Local attack vector and high privileges required to write crafted file; no scope change; full CIA impact on vulnerable system only.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (CERTVDE).

CVSS VectorVendor: CERTVDE

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Aug 03, 2026 - 07:21 vuln.today
Patch available
Aug 03, 2026 - 07:01 EUVD
CVE Published
Aug 03, 2026 - 06:28 cve.org
HIGH 8.4

DescriptionCVE.org

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory, potentially resulting in unauthorized access to connected devices and exposure, modification, or disruption of device data or operation.

AnalysisAI

Endress+Hauser FDI Package Library versions 1.00.00 through 2.01.00 exposes a CWE-427 (Uncontrolled Search Path Element) flaw in its iDTM FDI component, allowing a locally privileged attacker to activate the debug interface by dropping a crafted file into the application directory. Successful exploitation grants unauthorized access to connected industrial field devices, enabling data exfiltration, configuration manipulation, or operational disruption. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Attain elevated privileges on host
Delivery
Write crafted file to FDI application directory
Exploit
Application loads crafted file
Execution
Debug interface activated
Persist
Access connected field devices
Impact
Exfiltrate, modify, or disrupt device data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires two concurrent conditions: (1) local access to the host system running FDI Package Library (AV:L - remote network exploitation is not possible), and (2) elevated privileges on that host sufficient to write files to the FDI application directory (PR:H). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.4 reflects the full confidentiality, integrity, and availability impact on the vulnerable system (VC:H/VI:H/VA:H), but the attack vector metrics critically shape real-world risk: AV:L requires the attacker to already have local access to the host, and PR:H requires elevated privileges - both are substantial prerequisites that rule out remote or opportunistic exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has gained elevated (administrator-level) access to an engineering workstation running Endress+Hauser FDI Package Library - whether through credential theft, lateral movement, or insider access - places a specially crafted file in the FDI application directory. When the iDTM FDI component processes the directory, the debug interface is activated, granting the attacker direct low-level access to connected field devices such as sensors or actuators, from which they can read sensitive process data, modify device configuration, or disrupt device operation. …
Remediation The vendor has released a patch; upgrade to FDI Package Library version 2.01.00 or later, as confirmed by the ENISA EUVD entry and CERTVDE advisory VDE-2026-065 (https://www.certvde.com/en/advisories/VDE-2026-065/). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all systems running affected Endress+Hauser FDI Package Library versions 1.00.00 through 2.01.00 and audit which users possess elevated local system access to these systems. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-427 – Uncontrolled Search Path Element

View all
CVE-2020-3153 MEDIUM POC
6.5
CVE-2020-3433 HIGH POC
7.8
CVE-2017-6517 CRITICAL POC
9.8
CVE-2020-27955 CRITICAL POC
9.8
CVE-2024-48990 HIGH POC
7.8
CVE-2022-2334 HIGH POC
7.2
CVE-2024-23054 CRITICAL POC
9.8
CVE-2023-31543 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-9593 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy