Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 03:37.

1 Advisories gefunden

VDE-2024-012

ifm: Vulnerabilities in ifm AC14 firmware

ifm — Smart PLC

ifm PSIRTkritisch

Veröffentlicht

9. Juli 2024

Letzte Aktualisierung

15. Januar 2026

Betroffene Sektoren

Risk Evaluation

In ifm Smart PLC firmware up to version 4.3.17 for Smart PLC controllers AC14xx and AC4xxS, an attacker can access the configuration by using the hardcoded credentials. The endpoint hosts a scripts capable of executing various commands.

Zusammenfassung der Gegenmaßnahmen

When using automation components, make sure that no unauthorized access can take place. Addition measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups.

Revisionshistorie (4)
  1. Erstveröffentlichung — 9. Juli 2024

    Initial revision.

  2. Update A — 27. August 2025

    Update: CWE from CVE-2024-28751, Revision History

  3. Update B — 6. Januar 2026

    Fixed Version range, Added Score to Vulnerability CVE-2024-28750, deleted "firmware" from the full product name of the hardware, changed Vulnerability title to CVE description

  4. Update C — 15. Januar 2026

    Update Product information

Offizielle Quelle: ifm PSIRT