VDE-2026-046

Vulnerability from csaf_vegagrieshaberkg - Published: 2026-05-04 06:00 - Updated: 2026-06-24 10:00
Summary
VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products
Severity
Medium
Notes
Summary: Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials. It was found that users with no or low rights can access information from devices that should not be available to them. An attacker can use this information to impersonate authorized users.
Impact: An unauthenticated attacker can obtain sensitive information, potentially enabling authenticated device modification.
Mitigation: Implement access controls for physical interfaces to prevent unauthorized access.
Remediation: Update to the fixed firmware versions listed in this advisory. Rotate any credentials used on affected devices as they may have been compromised. Contact VEGA Support if emergency code rotation is necessary based on your risk assessment. Fixed Versions: * Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART * Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART * Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA * Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA * Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1) * Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1) * Firmware 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz * Firmware 1.4.1 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz * Firmware 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC * Firmware 1.4.1 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC * Firmware 1.2.3 installed on VEGAPULS C 21 Two-wire 4_20 mA/HART * Firmware 1.2.2 installed on VEGAPULS C 21 Four-wire Modbus * Firmware 1.2.3 installed on VEGAPULS 21 Two-wire 4_20 mA/HART * Firmware 1.2.3 installed on VEGAPULS 31 Two-wire 4_20 mA/HART * Firmware 1.2.1 installed on VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA * Firmware 1.2.3 installed on VEGAPULS C 22 Two-wire 4_20 mA/HART * Firmware 1.2.3 installed on VEGAPULS C 23 Two-wire 4_20 mA/HART * Firmware 1.2.2 installed on VEGAPULS C 22 Four-wire Modbus * Firmware 1.2.2 installed on VEGAPULS C 23 Four-wire Modbus * Firmware 1.1.1 installed on VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL) * Firmware 1.0.1 installed on VEGAPULS 6X Two-wire Profibus PA * Firmware 1.3.2 installed on VEGAPULS 6X Four-wire Modbus * Firmware 1.4.1 installed on VEGAPULS 6X Four-wire Modbus
General Recommendation: Implement access controls for physical interfaces to prevent unauthorized access.

An unsecured configuration interface on the affected devices allows an unauthenticated remote attacker to gain sensitive information like hashed credentials and access codes.

CWE-306 - Missing Authentication for Critical Function
Affected products
Product Identifier Version Remediation
Unresolved product id: CSAFPID-32001
Unresolved product id: CSAFPID-32002
Unresolved product id: CSAFPID-32003
Unresolved product id: CSAFPID-32004
Unresolved product id: CSAFPID-32005
Unresolved product id: CSAFPID-32006
Unresolved product id: CSAFPID-32007
Unresolved product id: CSAFPID-32008
Unresolved product id: CSAFPID-32009
Unresolved product id: CSAFPID-32010
Unresolved product id: CSAFPID-32011
Unresolved product id: CSAFPID-32012
Unresolved product id: CSAFPID-32013
Unresolved product id: CSAFPID-32014
Unresolved product id: CSAFPID-32015
Unresolved product id: CSAFPID-32016
Unresolved product id: CSAFPID-32017
Unresolved product id: CSAFPID-32018
Unresolved product id: CSAFPID-32019
Unresolved product id: CSAFPID-32020
Unresolved product id: CSAFPID-32021
Unresolved product id: CSAFPID-32022
Unresolved product id: CSAFPID-32023
Product Identifier Version Remediation
Unresolved product id: CSAFPID-31001
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31002
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31003
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31004
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31005
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31006
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31007
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31008
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31009
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31010
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31011
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31012
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31013
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31014
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31015
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31016
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31017
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31018
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31019
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31020
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31021
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31022
Mitigation
Vendor Fix fix
Unresolved product id: CSAFPID-31023
Mitigation
Vendor Fix fix
CVE-2026-3323 Reference Score
VEGA Grieshaber KG / Firmware
Acknowledgments
CERT@VDE certvde.com
Product Security Unit at VEGA Grieshaber KG www.vega.com

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "organization": "Product Security Unit at VEGA Grieshaber KG",
        "summary": "reporting",
        "urls": [
          "https://www.vega.com"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "medium"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.\n\nIt was found that users with no or low rights can access information from devices that should not be available to them.\n\nAn attacker can use this information to impersonate authorized users.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "An unauthenticated attacker can obtain sensitive information, potentially enabling authenticated device modification.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Implement access controls for physical interfaces to prevent unauthorized access.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Update to the fixed firmware versions listed in this advisory. Rotate any credentials used on affected devices as they may have been compromised. Contact VEGA Support if emergency code rotation is necessary based on your risk assessment.\n\nFixed Versions:\n* Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART\n* Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART\n* Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA\n* Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA\n* Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)\n* Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)\n* Firmware 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz\n* Firmware 1.4.1 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz\n* Firmware 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC\n* Firmware 1.4.1 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC\n* Firmware 1.2.3 installed on VEGAPULS C 21 Two-wire 4_20 mA/HART\n* Firmware 1.2.2 installed on VEGAPULS C 21 Four-wire Modbus\n* Firmware 1.2.3 installed on VEGAPULS 21 Two-wire 4_20 mA/HART\n* Firmware 1.2.3 installed on VEGAPULS 31 Two-wire 4_20 mA/HART\n* Firmware 1.2.1 installed on VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA\n* Firmware 1.2.3 installed on VEGAPULS C 22 Two-wire 4_20 mA/HART\n* Firmware 1.2.3 installed on VEGAPULS C 23 Two-wire 4_20 mA/HART\n* Firmware 1.2.2 installed on VEGAPULS C 22 Four-wire Modbus\n* Firmware 1.2.2 installed on VEGAPULS C 23 Four-wire Modbus\n* Firmware 1.1.1 installed on VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL)\n* Firmware 1.0.1 installed on VEGAPULS 6X Two-wire Profibus PA\n* Firmware 1.3.2 installed on VEGAPULS 6X Four-wire Modbus\n* Firmware 1.4.1 installed on VEGAPULS 6X Four-wire Modbus",
        "title": "Remediation"
      },
      {
        "category": "general",
        "text": "Implement access controls for physical interfaces to prevent unauthorized access.",
        "title": "General Recommendation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@vega.com",
      "name": "VEGA Grieshaber KG",
      "namespace": "https://vega.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "VEGA Grieshaber PSIRT",
        "url": "https://www.vega.com/en-us/company/legal-notice/information-on-cyber-security"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for VEGA Grieshaber",
        "url": "https://certvde.com/en/advisories/vendor/vega"
      },
      {
        "category": "self",
        "summary": "VDE-2026-046: VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2026-046"
      },
      {
        "category": "self",
        "summary": "VDE-2026-046: VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products - CSAF",
        "url": "https://vega.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-046.json"
      }
    ],
    "title": "VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products",
    "tracking": {
      "aliases": [
        "VDE-2026-046"
      ],
      "current_release_date": "2026-06-24T10:00:00.000Z",
      "generator": {
        "date": "2026-06-24T08:45:12.086Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.44"
        }
      },
      "id": "VDE-2026-046",
      "initial_release_date": "2026-05-04T06:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-05-04T06:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial Release"
        },
        {
          "date": "2026-05-04T09:00:00.000Z",
          "number": "1.0.1",
          "summary": "Updated Title"
        },
        {
          "date": "2026-06-24T10:00:00.000Z",
          "number": "1.0.2",
          "summary": "Added fixed versions to document notes remediation"
        }
      ],
      "status": "final",
      "version": "1.0.2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire 4_20 mA/HART",
                "product": {
                  "name": "VEGAPULS 6X Two-wire 4_20 mA/HART",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_4to20hart_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.????????????H????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA",
                "product": {
                  "name": "VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_4to20hartplussecondcurrentoutput_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????9????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)",
                "product": {
                  "name": "VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_4to20hartovervoltprot_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????A????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz",
                "product": {
                  "name": "VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz",
                  "product_id": "CSAFPID-11004",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_4to20harthighvolt_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????B????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC",
                "product": {
                  "name": "VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC",
                  "product_id": "CSAFPID-11005",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_4to20hartlowvolt_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????I????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS C 21 Two-wire 4_20 mA/HART",
                "product": {
                  "name": "VEGAPULS C 21 Two-wire 4_20 mA/HART",
                  "product_id": "CSAFPID-11006",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapulsc21_4to20hart_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PSC21.???????H?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-21"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS C 22 Two-wire 4_20 mA/HART",
                "product": {
                  "name": "VEGAPULS C 22 Two-wire 4_20 mA/HART",
                  "product_id": "CSAFPID-11016",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapulsc22_4to20hart_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PSC22.???????H?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-22"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS C 23 Two-wire 4_20 mA/HART",
                "product": {
                  "name": "VEGAPULS C 23 Two-wire 4_20 mA/HART",
                  "product_id": "CSAFPID-11017",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapulsc23_4to20hart_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PSC23.???????H?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-23"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS C 21 Four-wire Modbus",
                "product": {
                  "name": "VEGAPULS C 21 Four-wire Modbus",
                  "product_id": "CSAFPID-11007",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapulsc21_modbus_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PSC21.???????W?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-21"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS C 22 Four-wire Modbus",
                "product": {
                  "name": "VEGAPULS C 22 Four-wire Modbus",
                  "product_id": "CSAFPID-11018",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapulsc22_modbus_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PSC22.???????W?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-22"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS C 23 Four-wire Modbus",
                "product": {
                  "name": "VEGAPULS C 23 Four-wire Modbus",
                  "product_id": "CSAFPID-11019",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapulsc23_modbus_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PSC23.???????W?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-23"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 21 Two-wire 4_20 mA/HART",
                "product": {
                  "name": "VEGAPULS 21 Two-wire 4_20 mA/HART",
                  "product_id": "CSAFPID-11008",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls21_4to20hart_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS21.???????H?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-21"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 31 Two-wire 4_20 mA/HART",
                "product": {
                  "name": "VEGAPULS 31 Two-wire 4_20 mA/HART",
                  "product_id": "CSAFPID-11009",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls31_4to20hart_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS31.???????H?"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-31"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA",
                "product": {
                  "name": "VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA",
                  "product_id": "CSAFPID-11010",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls42_iolink_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS42.????????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-42"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL)",
                "product": {
                  "name": "VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL)",
                  "product_id": "CSAFPID-11020",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_ethip_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????X????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire Profibus PA",
                "product": {
                  "name": "VEGAPULS 6X Two-wire Profibus PA",
                  "product_id": "CSAFPID-11021",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_profibuspa_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????P????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "VEGAPULS 6X Four-wire Modbus",
                "product": {
                  "name": "VEGAPULS 6X Four-wire Modbus",
                  "product_id": "CSAFPID-11022",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:vega:vegapuls6x_modbus_hardware:*:*:*:*:*:*:*:*",
                    "model_numbers": [
                      "PS6X.2???????????W????????"
                    ],
                    "x_generic_uris": [
                      {
                        "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                        "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                      }
                    ]
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.3.2",
                    "product": {
                      "name": "Firmware \u003c 1.3.2",
                      "product_id": "CSAFPID-21001",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003e=1.4.0|\u003c1.4.1",
                    "product": {
                      "name": "Firmware \u003e= 1.4.0 and \u003c 1.4.1",
                      "product_id": "CSAFPID-21002",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.3.2",
                    "product": {
                      "name": "Firmware 1.3.2",
                      "product_id": "CSAFPID-22001",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:1.3.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.4.1",
                    "product": {
                      "name": "Firmware 1.4.1",
                      "product_id": "CSAFPID-22002",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:1.4.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire 4_20 mA/HART"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.3.2",
                    "product": {
                      "name": "Firmware \u003c 1.3.2",
                      "product_id": "CSAFPID-21003",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003e=1.4.0|\u003c1.4.1",
                    "product": {
                      "name": "Firmware \u003e= 1.4.0 and \u003c 1.4.1",
                      "product_id": "CSAFPID-21004",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.3.2",
                    "product": {
                      "name": "Firmware 1.3.2",
                      "product_id": "CSAFPID-22003",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:1.3.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.4.1",
                    "product": {
                      "name": "Firmware 1.4.1",
                      "product_id": "CSAFPID-22004",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:1.4.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.3.2",
                    "product": {
                      "name": "Firmware \u003c 1.3.2",
                      "product_id": "CSAFPID-21005",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003e=1.4.0|\u003c1.4.1",
                    "product": {
                      "name": "Firmware \u003e= 1.4.0 and \u003c 1.4.1",
                      "product_id": "CSAFPID-21006",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.3.2",
                    "product": {
                      "name": "Firmware 1.3.2",
                      "product_id": "CSAFPID-22005",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:1.3.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.4.1",
                    "product": {
                      "name": "Firmware 1.4.1",
                      "product_id": "CSAFPID-22006",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:1.4.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.3.2",
                    "product": {
                      "name": "Firmware \u003c 1.3.2",
                      "product_id": "CSAFPID-21007",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003e=1.4.0|\u003c1.4.1",
                    "product": {
                      "name": "Firmware \u003e= 1.4.0 and \u003c 1.4.1",
                      "product_id": "CSAFPID-21008",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.3.2",
                    "product": {
                      "name": "Firmware 1.3.2",
                      "product_id": "CSAFPID-22007",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:1.3.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.4.1",
                    "product": {
                      "name": "Firmware 1.4.1",
                      "product_id": "CSAFPID-22008",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:1.4.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.3.2",
                    "product": {
                      "name": "Firmware \u003c 1.3.2",
                      "product_id": "CSAFPID-21009",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003e=1.4.0|\u003c1.4.1",
                    "product": {
                      "name": "Firmware \u003e= 1.4.0 and \u003c 1.4.1",
                      "product_id": "CSAFPID-21010",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.3.2",
                    "product": {
                      "name": "Firmware 1.3.2",
                      "product_id": "CSAFPID-22009",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:1.3.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.4.1",
                    "product": {
                      "name": "Firmware 1.4.1",
                      "product_id": "CSAFPID-22010",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:1.4.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.3",
                    "product": {
                      "name": "Firmware \u003c 1.2.3",
                      "product_id": "CSAFPID-21011",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc21_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-21"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.3",
                    "product": {
                      "name": "Firmware 1.2.3",
                      "product_id": "CSAFPID-22011",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc21_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-21"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS C 21 Two-wire 4_20 mA/HART"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.3",
                    "product": {
                      "name": "Firmware \u003c 1.2.3",
                      "product_id": "CSAFPID-21016",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc22_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-22"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.3",
                    "product": {
                      "name": "Firmware 1.2.3",
                      "product_id": "CSAFPID-22016",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc22_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-22"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS C 22 Two-wire 4_20 mA/HART"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.3",
                    "product": {
                      "name": "Firmware \u003c 1.2.3",
                      "product_id": "CSAFPID-21017",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc23_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-23"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.3",
                    "product": {
                      "name": "Firmware 1.2.3",
                      "product_id": "CSAFPID-22017",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc23_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-23"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS C 23 Two-wire 4_20 mA/HART"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.2",
                    "product": {
                      "name": "Firmware \u003c 1.2.2",
                      "product_id": "CSAFPID-21012",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc21_modbus_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-21"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.2",
                    "product": {
                      "name": "Firmware 1.2.2",
                      "product_id": "CSAFPID-22012",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc21_modbus_firmware:1.2.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-21"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS C 21 Four-wire Modbus"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.2",
                    "product": {
                      "name": "Firmware \u003c 1.2.2",
                      "product_id": "CSAFPID-21018",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc22_modbus_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-22"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.2",
                    "product": {
                      "name": "Firmware 1.2.2",
                      "product_id": "CSAFPID-22018",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc22_modbus_firmware:1.2.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-22"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS C 22 Four-wire Modbus"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.2",
                    "product": {
                      "name": "Firmware \u003c 1.2.2",
                      "product_id": "CSAFPID-21019",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc23_modbus_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-23"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.2",
                    "product": {
                      "name": "Firmware 1.2.2",
                      "product_id": "CSAFPID-22019",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapulsc23_modbus_firmware:1.2.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-c-23"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS C 23 Four-wire Modbus"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.3",
                    "product": {
                      "name": "Firmware \u003c 1.2.3",
                      "product_id": "CSAFPID-21013",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls21_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-21"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.3",
                    "product": {
                      "name": "Firmware 1.2.3",
                      "product_id": "CSAFPID-22013",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls21_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-21"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 21 Two-wire 4_20 mA/HART"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.3",
                    "product": {
                      "name": "Firmware \u003c 1.2.3",
                      "product_id": "CSAFPID-21014",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls31_4to20hart_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-31"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.3",
                    "product": {
                      "name": "Firmware 1.2.3",
                      "product_id": "CSAFPID-22014",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls31_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-31"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 31 Two-wire 4_20 mA/HART"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.2.1",
                    "product": {
                      "name": "Firmware \u003c 1.2.1",
                      "product_id": "CSAFPID-21015",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls42_iolink_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-42"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.2.1",
                    "product": {
                      "name": "Firmware 1.2.1",
                      "product_id": "CSAFPID-22015",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls42_iolink_firmware:1.2.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-42"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.1.1",
                    "product": {
                      "name": "Firmware \u003c 1.1.1",
                      "product_id": "CSAFPID-21020",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_ethip_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.1.1",
                    "product": {
                      "name": "Firmware 1.1.1",
                      "product_id": "CSAFPID-22020",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_ethip_firmware:1.1.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL)"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.0.1",
                    "product": {
                      "name": "Firmware \u003c 1.0.1",
                      "product_id": "CSAFPID-21021",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_profibuspa_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.0.1",
                    "product": {
                      "name": "Firmware 1.0.1",
                      "product_id": "CSAFPID-22021",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_profibuspa_firmware:1.0.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Two-wire Profibus PA"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003c1.3.2",
                    "product": {
                      "name": "Firmware \u003c 1.3.2",
                      "product_id": "CSAFPID-21022",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:generic/\u003e=1.4.0|\u003c1.4.1",
                    "product": {
                      "name": "Firmware = 1.4.0",
                      "product_id": "CSAFPID-21023",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:*:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.3.2",
                    "product": {
                      "name": "Firmware 1.3.2",
                      "product_id": "CSAFPID-22022",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:1.3.2:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "1.4.1",
                    "product": {
                      "name": "Firmware 1.4.1",
                      "product_id": "CSAFPID-22023",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:1.4.1:*:*:*:*:*:*:*",
                        "x_generic_uris": [
                          {
                            "namespace": "https://www.vega.com/en-us/products/product-catalog/",
                            "uri": "https://www.vega.com/en-us/products/product-catalog/level/radar/vegapuls-6x"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "VEGAPULS 6X Four-wire Modbus"
              },
              {
                "category": "product_name",
                "name": "CVE Reference Score",
                "product": {
                  "name": "CVE-2026-3323 Reference Score",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "VEGA Grieshaber KG"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023"
        ],
        "summary": "Affected products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31001",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.????????????H????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware = 1.4.0 installed on VEGAPULS 6X Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31002",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.????????????H????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32001",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:1.3.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.????????????H????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32002",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hart_firmware:1.4.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.????????????H????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA",
          "product_id": "CSAFPID-31003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????9????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware = 1.4.0 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA",
          "product_id": "CSAFPID-31004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????9????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA",
          "product_id": "CSAFPID-32003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:1.3.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????9????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART plus second current output 4_20 mA",
          "product_id": "CSAFPID-32004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartplussecondcurrentoutput_firmware:1.4.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????9????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22004",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)",
          "product_id": "CSAFPID-31005",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????A????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware = 1.4.0 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)",
          "product_id": "CSAFPID-31006",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????A????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21006",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.3.2 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)",
          "product_id": "CSAFPID-32005",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:1.3.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????A????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22005",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.4.1 installed on VEGAPULS 6X Two-wire 4_20 mA/HART with overvoltage protection (Not for Ex Zone 0, 20; not for Div 1)",
          "product_id": "CSAFPID-32006",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartovervoltprot_firmware:1.4.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????A????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22006",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz",
          "product_id": "CSAFPID-31007",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????B????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware = 1.4.0 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz",
          "product_id": "CSAFPID-31008",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????B????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21008",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz",
          "product_id": "CSAFPID-32007",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:1.3.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????B????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22007",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.4.1 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 90_253 V AC; 50/60 Hz",
          "product_id": "CSAFPID-32008",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20harthighvolt_firmware:1.4.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????B????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22008",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC",
          "product_id": "CSAFPID-31009",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????I????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21009",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware = 1.4.0 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC",
          "product_id": "CSAFPID-31010",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????I????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21010",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.3.2 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC",
          "product_id": "CSAFPID-32009",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:1.3.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????I????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22009",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.4.1 installed on VEGAPULS 6X Four-wire 4_20 mA/HART; 9.6_48 V DC; 20_42 V AC",
          "product_id": "CSAFPID-32010",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_4to20hartlowvolt_firmware:1.4.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????I????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22010",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.3 installed on VEGAPULS C 21 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31011",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc21_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC21.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-21011",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.3 installed on VEGAPULS C 21 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32011",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc21_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC21.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-22011",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.3 installed on VEGAPULS C 22 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31016",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc22_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC22.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-21016",
        "relates_to_product_reference": "CSAFPID-11016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.3 installed on VEGAPULS C 22 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32016",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc22_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC22.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-22016",
        "relates_to_product_reference": "CSAFPID-11016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.3 installed on VEGAPULS C 23 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31017",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc23_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC23.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-21017",
        "relates_to_product_reference": "CSAFPID-11017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.3 installed on VEGAPULS C 23 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32017",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc23_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC23.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-22017",
        "relates_to_product_reference": "CSAFPID-11017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.2 installed on VEGAPULS C 21 Four-wire Modbus",
          "product_id": "CSAFPID-31012",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc21_modbus_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC21.???????W?"
            ]
          }
        },
        "product_reference": "CSAFPID-21012",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.2 installed on VEGAPULS C 21 Four-wire Modbus",
          "product_id": "CSAFPID-32012",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc21_modbus_firmware:1.2.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC21.???????W?"
            ]
          }
        },
        "product_reference": "CSAFPID-22012",
        "relates_to_product_reference": "CSAFPID-11007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.2 installed on VEGAPULS C 22 Four-wire Modbus",
          "product_id": "CSAFPID-31018",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc22_modbus_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC22.???????W?"
            ]
          }
        },
        "product_reference": "CSAFPID-21018",
        "relates_to_product_reference": "CSAFPID-11018"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.2 installed on VEGAPULS C 22 Four-wire Modbus",
          "product_id": "CSAFPID-32018",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc22_modbus_firmware:1.2.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC22.???????W?"
            ]
          }
        },
        "product_reference": "CSAFPID-22018",
        "relates_to_product_reference": "CSAFPID-11018"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.2 installed on VEGAPULS C 23 Four-wire Modbus",
          "product_id": "CSAFPID-31019",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc23_modbus_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC23.???????W?"
            ]
          }
        },
        "product_reference": "CSAFPID-21019",
        "relates_to_product_reference": "CSAFPID-11019"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.2 installed on VEGAPULS C 23 Four-wire Modbus",
          "product_id": "CSAFPID-32019",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapulsc23_modbus_firmware:1.2.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PSC23.???????W?"
            ]
          }
        },
        "product_reference": "CSAFPID-22019",
        "relates_to_product_reference": "CSAFPID-11019"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.3 installed on VEGAPULS 21 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31013",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls21_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS21.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-21013",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.3 installed on VEGAPULS 21 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32013",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls21_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS21.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-22013",
        "relates_to_product_reference": "CSAFPID-11008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.3 installed on VEGAPULS 31 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-31014",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls31_4to20hart_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS31.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-21014",
        "relates_to_product_reference": "CSAFPID-11009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.3 installed on VEGAPULS 31 Two-wire 4_20 mA/HART",
          "product_id": "CSAFPID-32014",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls31_4to20hart_firmware:1.2.3:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS31.???????H?"
            ]
          }
        },
        "product_reference": "CSAFPID-22014",
        "relates_to_product_reference": "CSAFPID-11009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.2.1 installed on VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA",
          "product_id": "CSAFPID-31015",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls42_iolink_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS42.????????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21015",
        "relates_to_product_reference": "CSAFPID-11010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.2.1 installed on VEGAPULS 42 Three-wire IO-Link, Transistor, 4_20 mA",
          "product_id": "CSAFPID-32015",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls42_iolink_firmware:1.2.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS42.????????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22015",
        "relates_to_product_reference": "CSAFPID-11010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.1.1 installed on VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL)",
          "product_id": "CSAFPID-31020",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_ethip_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????X????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21020",
        "relates_to_product_reference": "CSAFPID-11020"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.1.1 installed on VEGAPULS 6X Two-wire EtherNet/IP, Modbus TCP, OPC UA (Ethernet-APL)",
          "product_id": "CSAFPID-32020",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_ethip_firmware:1.1.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????X????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22020",
        "relates_to_product_reference": "CSAFPID-11020"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.0.1 installed on VEGAPULS 6X Two-wire Profibus PA",
          "product_id": "CSAFPID-31021",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_profibuspa_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????P????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21021",
        "relates_to_product_reference": "CSAFPID-11021"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.0.1 installed on VEGAPULS 6X Two-wire Profibus PA",
          "product_id": "CSAFPID-32021",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_profibuspa_firmware:1.0.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????P????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22021",
        "relates_to_product_reference": "CSAFPID-11021"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003c 1.3.2 installed on VEGAPULS 6X Four-wire Modbus",
          "product_id": "CSAFPID-31022",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????W????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21022",
        "relates_to_product_reference": "CSAFPID-11022"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware = 1.4.0 installed on VEGAPULS 6X Four-wire Modbus",
          "product_id": "CSAFPID-31023",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:*:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????W????????"
            ]
          }
        },
        "product_reference": "CSAFPID-21023",
        "relates_to_product_reference": "CSAFPID-11022"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.3.2 installed on VEGAPULS 6X Four-wire Modbus",
          "product_id": "CSAFPID-32022",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:1.3.2:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????W????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22022",
        "relates_to_product_reference": "CSAFPID-11022"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 1.4.1 installed on VEGAPULS 6X Four-wire Modbus",
          "product_id": "CSAFPID-32023",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:vega:vegapuls6x_modbus_firmware:1.4.1:*:*:*:*:*:*:*",
            "model_numbers": [
              "PS6X.2???????????W????????"
            ]
          }
        },
        "product_reference": "CSAFPID-22023",
        "relates_to_product_reference": "CSAFPID-11022"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3323",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unsecured configuration interface on the affected devices allows an unauthenticated remote attacker to gain sensitive information like hashed credentials and access codes.",
          "title": "CVE Description"
        },
        {
          "category": "details",
          "text": "Due to different bus and network interfaces the affected products have different CVSS vectors. Please see the scores listed in the CSAF for details.",
          "title": "Vulnerability details"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021",
          "CSAFPID-32022",
          "CSAFPID-32023"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-0002"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Implement access control to physical interfaces to prevent unauthorized access.",
          "product_ids": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to fixed firmware versions listed in this advisory.\n\nRotate any credentials that were used on the affected devices as they may have been compromised.\n\nContact VEGA Support if rotating emergency codes is necessary based on your risk assessment.",
          "product_ids": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023"
          ],
          "restart_required": {
            "category": "vulnerable_component",
            "details": "A restart of the vulnerable component is required after applying the firmware update."
          },
          "url": "https://www.vega.com/en-us/downloads"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023"
          ]
        },
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0002"
          ]
        }
      ],
      "title": "Privilege escalation through unsecured configuration interface"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…