CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 14:22.
Filters
1 active1 advisories found
SSA-794185
SSA-794185: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SIPROTEC, SICAM and Related Products
Risk evaluation
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SIPROTEC, SICAM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the RADIUS client, e.g., a SICAM device) and a RADIUS server, to forge Access-Request packets in a way that enables them to modify the corresponding server response packet at will, e.g., turning an "Access-Reject" message into an "Access-Accept". This would cause the Network Access Server to grant the attackers access to the network with the attackers desired authorization (and without the need of knowing or guessing legitimate access credentials). Further details incl. external references can be found in the chapter "Additional Information". Siemens has released new versions for several affected products and recommends to update to the latest versions, and to configure the updated systems as recommended in the chapter "Additional Information". Siemens has released new versions for the affected products and recommends to update to the latest versions.See chapter "Additional Information" for details.
Mitigation summary
Configure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
Revision history (4)
Initial publication — 13 May 2025
Publication Date
Update A — 12 August 2025
Added fix for affected firmware modules in SICAM A8000 (CPCI85 for CP-8031/CP-8050, CPC80 for CP-8000/CP-8021/CP-8022, SICORE for CP-8010/CP-8012), SICAM EGS (CPCI85) and SICAM S8000 (SICORE). Added fix for SICAM Q200, for SIPROTEC 5 - CP300 and CP150 Devices, and for SIPROTEC 5 Compact 7SX800 (CP050). Added SICAM AK 3, SICAM BC, SICAM TM, SICAM GridEdge and SIPROTEC 5 - CP200 Devices to the list of known not affected products
Update B — 11 November 2025
Added fix for SIPROTEC 5 - CP100 Devices
Update C — 9 June 2026
Added fix for PowerLink IP