Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 15:23.

Filters

1 active
Reset filters

1 advisories found

SSA-148322

SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL

Siemens — PSS(R)SINCAL V21.5

Siemens ProductCERThigh

Published

13 October 2026

Last update

13 October 2026

Linked CVEs

Affected sectors

Risk evaluation

PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to use the legacy WibuKey dongle license type. Siemens is actively preparing updates and recommends applicable mitigations for products where patches are currently unavailable.

Mitigation summary

Install WIBU Systems WibuKey Runtime for Windows 6.72 or later version manually to fix the issue: Download the package from <a href="https://www.wibu.com/support/user/user-software.html">User Software - Wibu-Systems</a> and follow the installation instructions from WIBU Systems.

Revision history (1)
  1. Initial publication — 13 October 2026

    Publication Date

Official source: Siemens ProductCERT