CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.

Filters

1 active

Reset filters

Search: VDE-2021-017

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2021-017

MB connect line: Privilege escalation in mbDIALUP

MB connect line — mbDIALUP

MB connect line PSIRTcritical

Published

22 July 2021

Last update

14 May 2025

Linked CVEs

CVE-2021-33527 CVE-2021-33526

Affected sectors

Risk evaluation

Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management. Update A, 2021-11-24 corrected fixed version in solution from 3.9R0.4 to 3.9R0.5 Update B, 2022-03-28 Updated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability

Mitigation summary

Update to 3.9R0.5

Revision history (4)

Initial publication — 22 July 2021
Initial revision.
Update A — 24 November 2021
Update A
Update B — 28 March 2022
Update B
Update C — 14 May 2025
Fix: version space, added distribution

Official source: MB connect line PSIRT