Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.

Filters

1 active
Reset filters
Search: FSA-202301

1 advisories found

FSA-202301

Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance

Festo — LX Appliance

Festo PSIRTmiddel

Published

29 August 2023

Last update

1 October 2025

Linked CVEs

CVE-2021-23414

Affected sectors

Risk evaluation

A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.

Mitigation summary

Contact Festo Didactic services department at services.didactic@festo.com to update your LX Appliance to the latest version.

Revision history (2)

  1. Initial publication — 29 August 2023

    Initial revision.

  2. Update A — 1 October 2025

    Adjusted to VDE template. Changed title from "Video.js Cross-Site-Scripting (XSS) vulnerability in LX Appliance" to "Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance".

Official source: Festo PSIRT