CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 8 November 2026 at 08:18.
Filters
1 active1 advisories found
SA25P007
B&R Automation Studio Update of SQLite version
Published
18 February 2026
Last update
14 May 2026
Linked CVEs
Affected sectors
Risk evaluation
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.
Mitigation summary
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
Revision history (2)
Initial publication — 18 February 2026
Initial version.
Update A — 14 May 2026
Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.