Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active
Reset filters

1 advisories found

SCA-2026-0003

Vulnerability affecting SICK nanoScan3 and microScan3

SICK — microScan3

SICK PSIRTmiddel

Published

26 January 2026

Last update

26 January 2026

Linked CVEs

Affected sectors

Risk evaluation

SICK has identified a 3rd party vulnerability (CVE-2025-55093) in the nanoScan3 and microScan3. Only specific variants within the microScan3 and nanoScan3 families are affected by CVE-2025-55093. The underlying issue in the NetX Duo networking module could, under specific conditions, cause the device to enter a safe error state that requires a restart. SICK recommends applying the mitigation for CVE-2025-55093.

Mitigation summary

Ensure that an IP address is configured or assigned via DHCP and that the network is properly secured against unauthorized access so that only trusted entities have access to the devices. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources ”SICK Operating Guidelines” and ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices.

Revision history (1)
  1. Initial publication — 26 January 2026

    Initial version

Official source: SICK PSIRT