CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 14:22.
Filters
1 active1 advisories found
VDE-2020-043
Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability
Risk evaluation
Bender is publishing this advisory to inform customers about a security vulnerability in all devices running the COMTRAXX software. The user authorization is validated for most, but not all routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization.
Mitigation summary
• restrict network access to the above-mentioned devices • install latest software update
Revision history (1)
Initial publication — 16 October 2020
Initial revision.