CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 20:32.
Filter
1 aktiv1 Advisories gefunden
SEVD-2026-195-02
Insufficiently Protected Credentials vulnerability on EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric — EcoStruxure™ Cybersecurity Admin Expert
Veröffentlicht
14. Juli 2026
Letzte Aktualisierung
14. Juli 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Cybersecurity Admin Expert product (CAE). The [EcoStruxure™ Cybersecurity Admin Expert](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=63515) product is a configurator for managing cybersecurity in your electrical network’s operational technology (OT). It is an intuitive, software-based tool used for multiple administration purposes. Failure to apply the remediation provided below may risk an authentication bypass and privilege escalation attack, which could result in unauthorized access to application accounts, manipulation of credentials, and potential compromise of managed devices.
Zusammenfassung der Gegenmaßnahmen
Version 4.2.1 of EcoStruxure™ Cybersecurity Admin Expert (CAE) includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/63515-ecostruxure-cybersecurity-admin-expert/#software-and-firmware Host computer reboot is required.
Revisionshistorie (1)
Erstveröffentlichung — 14. Juli 2026
Original Release