Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 00:32.

1 Advisories gefunden

sca-2026-0013

Vulnerabilities Affecting SICK CorivaEngine

SICK — Localization systems

SICK PSIRThoch

Veröffentlicht

11. September 2026

Letzte Aktualisierung

11. September 2026

Betroffene Sektoren

Risk Evaluation

SICK CorivaEngine includes the third-party components Netty and Spring Cloud Gateway that are affected by multiple known vulnerabilities. Under certain conditions, these vulnerabilities could allow remote attackers to perform HTTP request smuggling, cause resource exhaustion, or manipulate forwarded request headers. Successful exploitation may impact the integrity and availability of affected systems. SICK has addressed these vulnerabilities and recommends that customers apply the remediations described in this Security Advisory.

Zusammenfassung der Gegenmaßnahmen

Users are recommended to upgrade to version 2026.1.1.

Revisionshistorie (1)
  1. Erstveröffentlichung — 11. September 2026

    Initial version

Offizielle Quelle: SICK PSIRT