CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 03:07.
Filter
1 aktiv1 Advisories gefunden
Veröffentlicht
22. April 2025
Letzte Aktualisierung
22. Mai 2025
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
The versions of TRUMPF products stated below are including a version of log4net that's prone to XXE (External XML Entities) attacks under certain circumstances. This means, the log4net code can be tricked into loading externally hosted, potentially malicious XML code and possibly executing it. This vulnerability allows for the execution of remote XML code, possibly resulting in unauthorized (remote) access to, change of data or disruption of the whole system running the vulnerable application.
Zusammenfassung der Gegenmaßnahmen
New versions are available for the affected products. Install new versions as provided by TRUMPF SE + Co. KG. To aquire these versions please contact your TRUMPF Service with the PR number 500879.
Revisionshistorie (2)
Erstveröffentlichung — 22. April 2025
Initial version
Update A — 22. Mai 2025
Fix: added distribution, quotation mark