CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2020-028

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2020-028

WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Version <= FW03

WAGO — 750 Fieldbus Coupler

WAGO PSIRTcritical

Published

30 September 2020

Last update

14 May 2025

Linked CVEs

CVE-2020-12506

Affected sectors

Risk evaluation

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to change some special parameters without authentication.

Mitigation summary

* Restrict network access to the device. * Do not directly connect the device to the internet. * Disable unused TCP/UDP ports. * Disable web-based management ports 80/443 after the configuration phase

Revision history (3)

Initial publication — 30 September 2020
initial revision
Update A — 10 April 2025
Fixed csaf reference URL
Update B — 14 May 2025
Fix: added distribution

Official source: WAGO PSIRT