ANDRITZ vulnerabilities

Products

• 250 SCALA 4
• HIPASE-250 4

Latest ANDRITZ CVEs

Newest publication first

1. CVE-2026-65313 Use of hard-coded VNC credentials in the engineering-workstation provisioning

   Published 2026-07-31

   High·CVSS 8.1 EPSS 0.27%

   A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the p...

2. CVE-2026-65311 Missing authentication for logging-configuration endpoint

   Published 2026-07-31

   Medium·CVSS 5.3 EPSS 0.46%

   The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service ma...

3. CVE-2026-65310 Missing authentication and permissive CORS policy

   Published 2026-07-31

   High·CVSS 7.5 EPSS 0.50%

   ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values a...

4. CVE-2026-65309 Storage of passwords in a reversible format

   Published 2026-07-31

   High·CVSS 7.5 EPSS 0.25%

   ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.