Frauscher vulnerabilities
We track 6 vulnerabilities in Frauscher products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2025.
Latest Frauscher vulnerabilities
- 9.1 Critical severity
FDS102: Improper Neutralization of Special Elements used in an OS Command
A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.
- 8.8 High severity
FDS102 for FAdC/FAdCi: Improper Control of Generation of Code
This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.
- 9.8 Critical severity
FDS101 for FAdC/FAdCi: Improper Control of Generation of Code
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of t
- 7.5 High severity
FDS101 for FAdC/FAdCi: Improper Limitation of a Pathname to a Restricted Directory
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesys
- 7.5 High severity
Diagnostic System FDS101 for FAdC/FAdCi: Improper Limitation of a Pathname to a Restricted Directory
Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesyst
- 9.8 Critical severity
Diagnostic System FDS102: Unrestricted Upload of File with Dangerous Type
Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.