CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2020-038

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2020-038

Pepperl+Fuchs: Multiple vulnerabilites in Comtrol IO-Link Master

Pepperl+Fuchs — IO-Link Master

Pepperl+Fuchs PSIRThigh

Published

4 January 2021

Last update

14 May 2025

Linked CVEs

CVE-2020-12511 CVE-2020-12513 CVE-2018-20679 CVE-2018-0732 CVE-2020-12512 CVE-2020-12514

Affected sectors

Risk evaluation

Several vulnerabilities exist within firmware versions up to and including v1.5.48.

Mitigation summary

In order to prevent the exploitation of the reported vulnerabilities, we recommend that the affected units be updated with the following three firmware packages: - U-Boot bootloader version 1.36 - System image version 1.52 - Application base version 1.6.11

Revision history (3)

Initial publication — 4 January 2021
initial revision
Update A — 12 February 2025
Fix: corrected self-reference, fixed version
Update B — 14 May 2025
Fix: added distribution

Official source: Pepperl+Fuchs PSIRT