CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.
Filters
1 active1 advisories found
Risk evaluation
Pepperl+Fuchs analyzed WirelessHART-Gateways in respect of a critical vulnerability within the Firmware. An attacker may exploit this vulnerability to get access to files and access restricted directories that are stored on the device by manipulating file parameters that reference these. Incoming HTTP requests using fcgi-bin/wgsetcgi and a filename parameter allow a directory / path traversal. A publicly available exploit already exists for this vulnerability.
Mitigation summary
A Firmware (version see table below), which solves the problem, is available. Please contact your support representative for this particular firmware package and update the corresponding product. | Product ID | Version | Bus-Interface of Device | |-----------------|----------|-------------------------| | WHA-GW-*-ETH | 03.00.08 | Modbus | | WHA-GW-*-ETH.EIP | 02.00.01 | Ethernet/IP |
Revision history (4)
Initial publication — 6 March 2019
Initial revision.
Update A — 6 November 2024
Fix: correct certvde domain, added self-reference
Update B — 12 March 2025
Fix: Version, Remediation
Update C — 14 May 2025
Fix: added distribution