Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 8. November 2026 um 10:21.

1 Advisories gefunden

SA24P003

​B&R PCs vulnerable to PixieFail attack​

B&R Industrial Automation GmbH — APC4100

ABB PSIRThoch

Veröffentlicht

29. Januar 2026

Letzte Aktualisierung

14. Mai 2026

Betroffene Sektoren

Risk Evaluation

ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. A network attacker could exploit the vulnerabilities to execute remote code, initiate DoS attacks, conduct DNS cache poisoning, or extract sensitive information.

Zusammenfassung der Gegenmaßnahmen

The problems are corrected in the following product versions: - APC4100 1.09 - APC910 No patch will be released (Please refer to the mitigation measures specified in this advisory). - C80 1.14 - MPC3100 1.24 - PPC1200 1.14 - PPC900 2.16 - APC2200 1.35 - PPC2200 1.35 - APC3100 1.45 - PPC3100 1.45 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

Revisionshistorie (2)
  1. Erstveröffentlichung — 29. Januar 2026

    Initial version.

  2. Update A — 14. Mai 2026

    Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.

Offizielle Quelle: ABB PSIRT