The security of our devices is a high priority for us. That is why we regularly monitor published security vulnerabilities (CVEs) and assess whether, and to what extent, our products are affected.
Depending on the nature and severity of a vulnerability, we take appropriate measures. These range from security updates and hotfixes to specific recommendations for action to help minimize potential risks.
We inform our customers about relevant security information and recommended measures, among other channels, through our newsletter.
The following example illustrates what such a recommendation for action might look like.
The security vulnerability CVE-2026-35189 only affects Linux-based devices that operate as servers using TLS encryption and process client certificates.
This means that the affected functions are Modbus Server, M-Bus Slave, and Transparent TCP Server – each when using the rarely enabled TLS option.
The devices’ configuration website is generally not affected, as certificate-based client authentication is typically not used in this context.
The vulnerability allows an attacker to consume a large amount of memory by using specially crafted client certificates, potentially causing programs to crash (Denial of Service, DoS).
If any of these functions are in use, we recommend securing them with additional measures (such as a firewall) or disabling them until a security update becomes available.
Click here for more detailed information in the CVE report.
Stay up to date
Subscribe to our update newsletter to receive regular information about:
✅ New firmware and software releases
✅ Security-related updates
✅ Product improvements
👉 Sign up for our update newsletter and never miss important security-related information again.
