Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 00:32.

1 Advisories gefunden

4TLB000837

IPEC Standalone iSM PHP2Shell and NTFS-3G Vulnerabilities

ABB — IPEC iSM Local Server

ABB PSIRTkritisch

Veröffentlicht

6. November 2026

Letzte Aktualisierung

6. November 2026

Betroffene Sektoren

Risk Evaluation

ABB is aware of public reports of vulnerabilities in third-party components (PHP and NTFS-3G) included in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities may insert and run arbitrary code on affected products. No active exploitations of the vulnerabilities have been reported to ABB by the time of writing this document. ABB will inform affected customers if this changes.

Zusammenfassung der Gegenmaßnahmen

For the products and version numbers listed below, please apply the relevant software patches according to the instructions provided by your ABB contact. - IPEC iSM Local Server: Debian 11 (Bullseye) - IPEC iSM Local Server: Debian 12 (Bookworm) - IPEC iSM Local Server: Debian 13 (Trixie) If further support is required to install the patches, please contact IPEC Sales (ipec.sales@gb.abb.com). Installation support may be chargeable where not covered by your existing warranty, maintenance or support agreement. ABB recommends that customers apply the update as soon as possible.

Revisionshistorie (1)
  1. Erstveröffentlichung — 6. November 2026

    Initial version.

Offizielle Quelle: ABB PSIRT