CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: VDE-2020-011

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2020-011

WAGO: Multiple Vulnerabilities in I/O-Check Service

WAGO — PFC100

WAGO PSIRThigh

Published

9 March 2020

Last update

22 May 2025

Linked CVEs

CVE-2019-5180 CVE-2019-5166 CVE-2019-5167 CVE-2019-5168 CVE-2019-5169 CVE-2019-5170 CVE-2019-5171

Affected sectors

Risk evaluation

An attacker needs an authorized login on the device in order to exploit the herein mentioned vulnerabilities. The reported vulnerabilities allow a local attacker with valid login credentials who is able to create files on the device to change the devices settings, e.g. default gateway address, time server etc. and potentially execute code.

Mitigation summary

* Disable I/O-Check service. * Restrict network access to the device. * Do not directly connect the device to the internet. * Disable unused TCP/UDP-ports.

Revision history (2)

Initial publication — 9 March 2020
Initial revision.
Update A — 22 May 2025
Fix: version space, quotation mark

Official source: WAGO PSIRT