CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 01:04.
Filters
1 active1 advisories found
Advisory2025-11_VDE-2025-101
CODESYS Development System - Deserialization of Untrusted Data
Risk evaluation
A vulnerability has been discovered in the print engine of the CODESYS development system. If a CODESYS project file or archive file was crafted in a specific way, the CODESYS development system could execute arbitrary code when a user opens these files and configures the print/printer options or prints the project or parts of it. This arbitrary code would be executed in the context of the user who was tricked into opening the project.
Mitigation summary
Open/install CODESYS archives, projects and packages from trustworthy sources only.
Revision history (1)
Initial publication — 1 December 2025
Initial revision.