CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 01:34.
Filter
1 aktiv1 Advisories gefunden
VDE-2024-054
Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities
Veröffentlicht
21. Oktober 2024
Letzte Aktualisierung
22. Mai 2025
Betroffene Sektoren
Risk Evaluation
Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.
Zusammenfassung der Gegenmaßnahmen
If an immediate firmware update is not possible, the only way to prevent an attack is to prevent the access of the Web Based Management tool from the internet. This can be achieved by using a network element, such as a router, which hides and secures the components from the internet.
Revisionshistorie (3)
Erstveröffentlichung — 21. Oktober 2024
Initial revision.
Update A — 6. November 2024
Fix: correct certvde domain, added self-reference
Update B — 22. Mai 2025
Fix: version space, quotation mark