B
CVE Numbering Authority
CERTVDE CERT@VDE
- Country
- Germany
- Organization type
- CERT
- Program role
- Root,CNA
- Root
- icscert
- Scope
- Root Scope: Organizations that are cooperative partners of CERT@VDE. CNA Scope: Products of CERT@VDE cooperative partners and brands listed at https://cert.vde.com/en/cna/ . Also, industrial and infrastructure control systems (and its components) of European Union (EU) based vendors unless covered by the scope of another CNA. Partners and brands include but are not limited to: ADS-TEC Industrial IT, Auma, sipos, Beckhoff, Bender, Bucher Automation, CLAAS, 365FarmNet, Satinfo, Carlo Gavazzi Controls, Codesys, DURAG GROUP, Draeger, Endress+Hauser, Euchner, Festo Didactic, Festo, Frauscher, GEA, HIMA, Harman, Helmholz, Hilscher, K4 DIGITAL, KEB, Krohne, Kuka, Lenze, BHN Services, MB connect line, Miele, Murrelektronik, PHOENIX CONTACT, Etherwan Systems, Innominate, Pepperl+Fuchs, Pilz, SMA, SWARCO, Trumpf, TRUMPF Laser, TRUMPF Werkzeugmaschinen, VARTA Storage, VEGA, WAGO, M&M Software, Weidmueller, Welotec, Wiesemann & Theis, ifm.
75.53/100 over 144 records
in the last 180 days
· 68.5/100 over 733 all-time
The rules, last 180 days
Share of the records earning each credit, and the points it is worth.
Describe: can a reader tell what the vulnerability is?
24.29 / 25Description
An English description that is not a placeholder: full credit from 200 characters, 0.7 from 80, 0.4 from 40, none below.
93% · 9.29/10
Title
A title.
100% · 5.0/5
Cwe
A weakness as a CWE identifier in problemTypes; a free-text problem type without one earns a quarter.
100% · 10.0/10
Scope: can a reader tell whether they are affected?
24.81 / 25Affected
An affected entry naming both a vendor and a product; one side missing or 'n/a' earns half.
100% · 10.0/10
Versions
An affected entry stating versions, as a version or a bound; a defaultStatus alone earns half.
100% · 8.0/8
Cpe
A CPE on an affected entry, or a cpeApplicability block.
97% · 6.81/7
Assess: can a reader tell how bad it is?
18.89 / 25Severity
A severity statement in the CNA container: a CVSS v3 or v4 vector, an SSVC decision, or a vendor rating as an 'other' metric. A CVSS v2 vector alone earns half.
100% · 15.0/15
Modern severity
A CVSS v4 vector or an SSVC decision.
78% · 3.89/5
Impacts
An impacts entry (a CAPEC identifier or an impact description).
0% · 0.0/5
Act: can a reader tell what to do about it?
7.54 / 25References
At least one reference.
100% · 7.0/7
Reference tags
At least one reference carrying tags.
6% · 0.31/5
Remediation
A reference tagged 'patch'; one tagged 'vendor-advisory', 'mitigation' or 'release-notes' earns 0.6.
3% · 0.23/8
Solutions
A solution or a workaround.
0% · 0.0/5
Context, not score
- Severity supplied by an ADP
- 0% (0 records)
- Weakness supplied by an ADP
- 0% (0 records)
- No severity statement
- 0%
- Descriptions under 100 characters
- 0%
- Known exploited
- 0
- Reservation to publication
- median 43.8 days · p90 207.8 days
- Rejected records
- 0
Score per publication year
| 2026 | 73.21 | 203 |
| 2025 | 63.98 | 136 |
| 2024 | 63.27 | 86 |
| 2023 | 65.11 | 104 |
| 2022 | 68.8 | 92 |
| 2021 | 71.83 | 89 |
| 2020 | 74.48 | 23 |
Badge