Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active
Reset filters

1 advisories found

VDE-2021-002

Weidmueller: WI Manager affected by fdtContainer vulnerability

Weidmüller — WI Manager

Weidmüller PSIRThigh

Published

20 January 2021

Last update

14 May 2025

Linked CVEs

Affected sectors

Risk evaluation

A vulnerability has been discovered in the fdtCONTAINER component and application by M&M Software GmbH. As this software is part of the Weidmüller FDT/DTM Software with WI Manager, this Weidmueller software is affected by the above vulnerability as well. The fdtCONTAINER component exchanges binary data blobs with the WI Manager. The WI Manager saves these binary data blobs into a project file. If an attacker gets write access to the project file, the project file can be manipulated to contain malicious code.

Mitigation summary

- Exchange project data only via secure exchange services - Use appropriate means to protect the project storage from unauthorized manipulation - Do not open project data from an unknown source - Reduce the user rights of the WI Manager to the necessary minimum

Revision history (2)
  1. Initial publication — 20 January 2021

    Initial revision.

  2. Update A — 14 May 2025

    Fix: version space, added distribution

Official source: Weidmüller PSIRT