Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active
Reset filters

1 advisories found

VDE-2020-017

Pepperl+Fuchs, PACTware: Two password vulnerabilities found

Pepperl+Fuchs — PACTware

Pepperl+Fuchs PSIRThigh

Published

29 May 2020

Last update

22 May 2025

Affected sectors

Risk evaluation

PACTware passwords are stored in a recoverable format (CVE-2020-9403) PACTware passwords may be modified without knowing the current password (CVE-2020-9404)

Mitigation summary

Any further changes in 'user role'-administration will need a confirmation by using the current login password. This will be fixed in following versions (and higher): PACTware 5.0.5.31 PACTware 4.1 SP6 Overview about version history: https://pactware.com/de/service You can protect yourself against manipulation by restricting the access to the PC where PACTware is installed. In case of not known passwords it can be reset by reinstallation of PACTware (all PACTware versions).

Revision history (2)
  1. Initial publication — 29 May 2020

    initial revision

  2. Update A — 22 May 2025

    Fix: version space, added distribution, quotation mark

Official source: Pepperl+Fuchs PSIRT