CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 01:04.
Filter
1 aktiv1 Advisories gefunden
Veröffentlicht
16. Juni 2025
Letzte Aktualisierung
21. November 2025
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
Vulnerabilities have been discovered in the WAGO Device Manager that allow any origin to access the server and set header values, as well as an endpoint that permits read access to the file system. The WAGO Device Manager is a software for configuring and parameterizing single WAGO products, which is included in the firmware. These vulnerabilities could be exploited by attackers to send requests and read server responses through crafted web applications or to access the file system.
Zusammenfassung der Gegenmaßnahmen
Update to Firmware version 04.07.01 (FW29) or 03.10.11 (FW22 Patch 2). For the latest Custom Firmware please contact the WAGO support.
Revisionshistorie (4)
Erstveröffentlichung — 16. Juni 2025
Initial release.
Update A — 4. Juli 2025
Removed incorrect custom firmware versions.
Update B — 7. Oktober 2025
Fixed a typo in the description for CVE-2025-25264
Update C — 21. November 2025
The two CVE descriptions and CVSS scores were edited.