Direkt zum Inhalt
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + Hersteller

ICS-Advisories

Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.

1

Gefunden

Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 7. November 2026 um 00:32.

1 Advisories gefunden

sca-2026-0016

Vulnerabilities Affecting SICK CorivaHub

SICK — Localization systems

SICK PSIRTkritisch

Veröffentlicht

16. Oktober 2026

Letzte Aktualisierung

16. Oktober 2026

Betroffene Sektoren

Risk Evaluation

SICK CorivaHub includes the third-party components Apache Tomcat and MapLibre GL, which are affected by two known vulnerabilities. These vulnerabilities include an improper input validation issue in Apache Tomcat and a vulnerability in MapLibre GL that could allow malicious behavior through custom GUIs. Under certain conditions, successful exploitation could affect the confidentiality, integrity and availability of the affected system. The attack surface associated with the Apache Tomcat vulnerability is significantly reduced by the default product configuration. Nevertheless, SICK recommends updating to CorivaHub 2026.1.2 to remediate both vulnerabilities.

Zusammenfassung der Gegenmaßnahmen

Users are recommended to upgrade to version 2026.1.2.

Revisionshistorie (1)
  1. Erstveröffentlichung — 16. Oktober 2026

    Initial version

Offizielle Quelle: SICK PSIRT