CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 8. November 2026 um 09:19.
Filter
1 aktiv1 Advisories gefunden
SA25P004
Automation Studio Insufficient Server Certificate Validation
Veröffentlicht
19. Januar 2026
Letzte Aktualisierung
14. Mai 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R Automation Studio establishes a connection with a server via the ANSL over TLS or OPC-UA protocol.
Zusammenfassung der Gegenmaßnahmen
The problem is corrected in the following product versions: B&R Automation Studio version 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is de-scribed in the user manual.
Revisionshistorie (2)
Erstveröffentlichung — 19. Januar 2026
Initial Version
Update A — 14. Mai 2026
Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.