CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.
Filters
1 active1 advisories found
VDE-2020-029
WAGO: XSS vulnerability in Web-UI in WAGO 750-88X and WAGO 750-89X
Risk evaluation
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The SNMP configuration page of the device is vulnerable for a persistent XSS (Cross-Site Scripting) attack.
Mitigation summary
* Restrict network access to the device. * Use strong passwords * Do not directly connect the device to the internet * Disable unused TCP/UDP-ports
Revision history (3)
Initial publication — 30 September 2020
initial revision
Update A — 10 April 2025
Fixed csaf reference URL
Update B — 14 May 2025
Fix: added distribution