CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2020-053

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2020-053

Pepperl+Fuchs: Comtrol RocketLinx ICRL-M - Multiple Vulnerabilities

Pepperl+Fuchs — ICRL-M-16RJ45/4CP-G-DIN

Pepperl+Fuchs PSIRTcritical

Published

8 March 2021

Last update

22 May 2025

Linked CVEs

CVE-2020-12504 CVE-2020-12502 CVE-2020-12503

Affected sectors

Risk evaluation

Several critical vulnerabilities within firmware.

Mitigation summary

For vulnerability CVE-2020-12502 'Cross-Site Request Forgery (CSRF)', CVE-2020- 12503 'Multiple Authenticated Command Injections' and CVE-2020-12504 'Active TFTP- Service' 1. Update following products to the respective Firmware Version: | Product ID | Firmware Version | |------------------------------|-------------------| | ICRL-M-8RJ45/4SFP-G-DIN | 1.4.0 | | ICRL-M-16RJ45/4CP-G-DIN | 1.4.0 | 2. Deactivate TFTP-Service

Revision history (3)

Initial publication — 8 March 2021
initial revision
Update A — 12 February 2025
Fix: corrected self-reference, fixed version
Update B — 22 May 2025
Fix: reference category, added distribution, quotation mark

Official source: Pepperl+Fuchs PSIRT