CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active

Reset filters

Search: VDE-2021-010

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2021-010

Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks

Endress+Hauser — Promag

Endress+Hauser PSIRTmiddel

Published

18 May 2021

Last update

14 May 2025

Linked CVEs

CVE-2017-13077 CVE-2017-13078 CVE-2017-13080

Affected sectors

Risk evaluation

Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks. Proline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the optional WLAN display is present.

Mitigation summary

If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.

Revision history (2)

Initial publication — 15 May 2021
Initial revision.
Update A — 14 May 2025
Fix: version space, added distribution

Official source: Endress+Hauser PSIRT