CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: SCA-2025-0003

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SCA-2025-0003

FreeRTOS Vulnerabilities have no impact on SICK Products

SICK — deTem

SICK PSIRTcritical

Published

28 February 2025

Last update

17 April 2026

Linked CVEs

CVE-2024-28115 CVE-2018-16525 CVE-2021-43997 CVE-2021-31571 CVE-2021-32020 CVE-2021-31572 CVE-2018-16601 CVE-2018-16526

Affected sectors

Risk evaluation

FreeRTOS has several known vulnerabilities and is used in various SICK products. A current analysis confirms that the identified vulnerabilities in FreeRTOS do not affect the mentioned SICK products. At this time, there is no indication of any potential risks to these SICK products.

Mitigation summary

See the official CISA advisory for mitigating measures.

Revision history (4)

Initial publication — 28 February 2025
Initial version
Update A — 20 May 2025
Added two products: ANS58 and ANM58. Both have the product status 'Known Not Affected'.
Update B — 30 July 2025
Updated Advisory: URL for SICK Operating Guidelines has been updated
Update C — 17 April 2026
Added product: DCM4 (status: known not affected) and adjusted version ranges for: DMM4, deTec4, deTem4, deTem4 A/P (all versions marked as known not affected)

Official source: SICK PSIRT