CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 15:23.
Filters
1 active1 advisories found
SSA-055299
SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic
Risk evaluation
The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
Mitigation summary
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
Revision history (1)
Initial publication — 13 October 2026
Publication Date