CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 01:04.
Filters
1 active1 advisories found
Published
27 February 2024
Last update
8 December 2025
Linked CVEs
Affected sectors
Risk evaluation
MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications. MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.
Mitigation summary
Festo Didactic has released Factory Control Panel as a replacement for XAMPP on its MES PCs. Contact technical support at services.didactic@festo.com to obtain the current version of Factory Control Panel which includes fixes for these vulnerabilities.
Revision history (3)
Initial publication — 27 February 2024
Initial version
Update A — 4 November 2025
Adjust to VDE template. Add missing CWE-IDs if available. Updated legal disclaimer to add references to special provisions.
Update B — 8 December 2025
Add all missing CWE identifier and CVSS 3.x scores.