CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 03:37.
Filter
1 aktiv1 Advisories gefunden
VDE-2020-014
Pepperl+Fuchs: Kr00k vulnerabilities in Broadcom Wi-Fi chipsets
Veröffentlicht
31. März 2020
Letzte Aktualisierung
14. Mai 2025
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Security researchers at ESET have reported a vulnerability called Kr00k (CVE-2019- 15126) which affects encrypted WiFi traffic for devices using Broadcom or Cypress chipsets. The vulnerability may allow an attacker to decrypt some WPA2- Personal/Enterprise traffic by forcing an AP/client to start utilizing an all-zero encryption key (similar to KRACK vulnerability).
Zusammenfassung der Gegenmaßnahmen
Pepperl+Fuchs is continuously and rigorously working closely with our partner to patch all affected Devices. Update for Tab-Ex 02 is planned for 05/2020 ECOM mobile devices are normally used in the corporate network. This implies that outgoing connections and local software installations have to be configured by administrators. It should be ensured that the data connections are additionally encrypted, e.g. HTTPS or SSH.
Revisionshistorie (2)
Erstveröffentlichung — 31. März 2020
Initial revision.
Update A — 14. Mai 2025
Fix: version space