CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2021-009

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2021-009

Pilz: Multiple products prone to Niche Ethernet Stack vulnerabilities

Pilz — Base-Device PNOZ mxp ETH (PNOZmulti Classic)

Pilz PSIRTcritical

Published

20 September 2021

Last update

14 May 2025

Linked CVEs

CVE-2020-35685 CVE-2021-31401 CVE-2021-31400 CVE-2020-35684 CVE-2020-35683

Affected sectors

Risk evaluation

Multiple products of PILZ utilise a third-party TCP/IP implementation - the "Niche Ethernet Stack". This TCP/IP stack contains multiple vulnerabilities which are therefore affecting the products listed above.

Mitigation summary

It is adviced to use firewalls or similar network security devices to prevent unauthorized network communication to the products affected.

Revision history (2)

Initial publication — 20 September 2021
Initial revision.
Update A — 14 May 2025
Fix: added distribution

Official source: Pilz PSIRT