CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.
Filters
1 active1 advisories found
VDE-2021-011
TRUMPF Laser GmbH: TruControl 2.14.0 to 3.14.0 affected by recent sudo vulnerability
Risk evaluation
TruControl laser control software from versions 2.14.0 to 3.14.0 use sudo versions affected by CVE-2021-3156. The affected sudo has a heap-based buffer overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
Mitigation summary
- Update to TruControl version 3.16.0 or higher or - Please contact your service partner (service.tls@trumpf.com) for instructions on how to retrieve the patch
Revision history (4)
Initial publication — 22 March 2021
initial revision
Update A — 10 April 2025
Fixed csaf reference URL and publisher information.
Update B — 14 May 2025
Fix: added distribution
Update C — 2 February 2026
Fix: CSAF Document Alias had the wrong VDE-ID, changed revision versioning scheme to semver