CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.

Filters

1 active

Reset filters

Search: FSA-202303

Vendor

Protocol

Sector

Severity

Source

1 advisories found

FSA-202303

Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products

Festo — MES PC

Festo PSIRThigh

Published

17 October 2023

Last update

1 October 2025

Linked CVEs

CVE-2023-26293

Affected sectors

Risk evaluation

A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected products of TIA Portal contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system.

Mitigation summary

Update TIA-Portal. Please refer to Siemens SSA-116924 for more details.

Revision history (2)

Initial publication — 17 October 2023
Initial revision.
Update A — 1 October 2025
Adjusted to VDE template. Changed title from "Vulnerable Siemens TIA-Portal in several Festo Didactic Products" to "Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products".

Official source: Festo PSIRT