Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.

Filters

1 active
Reset filters

1 advisories found

Advisory2025-01_VDE-2025-001

CODESYS Key physical side-channel vulnerability

CODESYS — CODESYS Key

CODESYS PSIRTmiddel

Published

21 January 2025

Last update

5 June 2025

Linked CVEs

Affected sectors

Control centres

Risk evaluation

The CODESYS Key USB dongle, which is based on WIBU CodeMeter technology, is affected by a physical side-channel vulnerability.

Mitigation summary

Update the CODESYS Key firmware to version 4.52. Updating the firmware also protects the future usage of additional CODESYS Key features by the CODESYS software and general usage by other software. The update can be installed, for example, via the CodeMeter Control Center.

Revision history (2)
  1. Initial publication — 14 January 2025

    Initial revision.

  2. Update A — 5 June 2025

    Fix: version space

Official source: CODESYS PSIRT