CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 20:32.
Filters
1 active1 advisories found
SEVD-2026-195-02
Insufficiently Protected Credentials vulnerability on EcoStruxure™ Cybersecurity Admin Expert
Schneider Electric — EcoStruxure™ Cybersecurity Admin Expert
Risk evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Cybersecurity Admin Expert product (CAE). The [EcoStruxure™ Cybersecurity Admin Expert](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=63515) product is a configurator for managing cybersecurity in your electrical network’s operational technology (OT). It is an intuitive, software-based tool used for multiple administration purposes. Failure to apply the remediation provided below may risk an authentication bypass and privilege escalation attack, which could result in unauthorized access to application accounts, manipulation of credentials, and potential compromise of managed devices.
Mitigation summary
Version 4.2.1 of EcoStruxure™ Cybersecurity Admin Expert (CAE) includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/product-range/63515-ecostruxure-cybersecurity-admin-expert/#software-and-firmware Host computer reboot is required.
Revision history (1)
Initial publication — 14 July 2026
Original Release