CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 15:23.
Filters
1 active1 advisories found
Risk evaluation
Schneider Electric is aware of a vulnerability in its SAGE RTU products. The SAGE RTU products are a line of devices designed for substation data acquisition and control. Failure to apply the mitigations provided below may enable a privileged user to install maliciously modified firmware on a SAGE RTU during an upgrade operation, resulting in modified device behavior.
Mitigation summary
Version C3414-500-S02L0 of SAGE RTU includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/C3414-500-S02L0_Firmware/ • Reboot needed: Yes After upgrading, navigate to the CPU configuration page to verify the firmware version number is correct.
Revision history (1)
Initial publication — 13 October 2026
Original Release