Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 8. November 2026 um 10:21.

1 Advisories gefunden

SA26P001

​​PVI​ ​​Insertion of Sensitive Information into Logfile

B&R Industrial Automation GmbH — ​​PVI​

ABB PSIRTmiddel

Veröffentlicht

29. Januar 2026

Letzte Aktualisierung

14. Mai 2026

Verknüpfte CVEs

Betroffene Sektoren

Risk Evaluation

ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and remediates the vulnerability. An attacker who successfully exploited this vulnerability could read sensitive information in the logging data of the PVI client application. Logging is deactivated by default in all PVI client versions.

Zusammenfassung der Gegenmaßnahmen

The problem is corrected in the following product versions: - PVI 6.5.0 Please note that PVI is included in the Automation Studio installation package and shares the same version number as the corresponding Automation Studio release. B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

Revisionshistorie (2)
  1. Erstveröffentlichung — 29. Januar 2026

    Initial version.

  2. Update A — 14. Mai 2026

    Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.

Offizielle Quelle: ABB PSIRT