Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 01:04.

1 Advisories gefunden

FSA-202402

Several Vulnerabilities in MES PC (Windows 10)

Festo — MES PC

Festo PSIRTkritisch

Risk Evaluation

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications. MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

Zusammenfassung der Gegenmaßnahmen

Festo Didactic has released Factory Control Panel as a replacement for XAMPP on its MES PCs. Contact technical support at services.didactic@festo.com to obtain the current version of Factory Control Panel which includes fixes for these vulnerabilities.

Revisionshistorie (3)
  1. Erstveröffentlichung — 27. Februar 2024

    Initial version

  2. Update A — 4. November 2025

    Adjust to VDE template. Add missing CWE-IDs if available. Updated legal disclaimer to add references to special provisions.

  3. Update B — 8. Dezember 2025

    Add all missing CWE identifier and CVSS 3.x scores.

Offizielle Quelle: Festo PSIRT