CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 02:35.
Filter
1 aktiv1 Advisories gefunden
VDE-2024-017
Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities
Veröffentlicht
10. April 2024
Letzte Aktualisierung
18. Mai 2026
Betroffene Sektoren
Risk Evaluation
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
Zusammenfassung der Gegenmaßnahmen
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
Revisionshistorie (3)
Erstveröffentlichung — 10. April 2024
Initial revision.
Update A — 22. Mai 2025
Fix: quotation mark
Update B — 18. Mai 2026
added score to vulnerability, Added CPEs, added last affected products to vulnerabilities