CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.

Filters

1 active

Reset filters

Search: FSA-202203

Vendor

Protocol

Sector

Severity

Source

1 advisories found

FSA-202203

Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system

Festo — Controller CECC-D

Festo PSIRTcritical

Published

18 July 2022

Last update

10 July 2025

Linked CVEs

CVE-2019-5105 CVE-2021-29241 CVE-2021-29242 CVE-2022-22519 CVE-2022-22517 CVE-2022-22515 CVE-2022-22514 CVE-2022-22513 CVE-2021-36763 CVE-2021-33485 CVE-2020-12068 CVE-2020-10245

Affected sectors

Energieopwekking

Risk evaluation

The Festo controller CECC product family in firmware version 2.4.2.0 is affected by multiple vulnerabilities in the CODESYS V3 runtime.

Mitigation summary

No fix planned. This issue will be handled with next hardware generation release.

Revision history (3)

Initial publication — 18 July 2022
Initial version.
Update A — 11 January 2024
Adjust link to VDE Advisory, TLP and update some CVE information, where CVSS was not known before.
Update B — 10 July 2025
Adjusted to VDE template. Changed document title from 'Festo Controller CECC-S,-LK,-D Family Firmware = 2.4.2.0 - Multiple Vulnerabilities in CODESYS V3 Runtime System' to' Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system'. Updated legal disclaimer to add references to special provisions.

Official source: Festo PSIRT