CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 8 November 2026 at 08:18.
Filters
1 active1 advisories found
Risk evaluation
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
Mitigation summary
Update to V10.6.1 or later version
Revision history (2)
Initial publication — 14 July 2026
Publication Date
Update A — 21 July 2026
Initial CISA Republication of Siemens ProductCERT SSA-288252 advisory