Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active
Reset filters
Search: VDE-2021-040

1 advisories found

VDE-2021-040

Endress+Hauser: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow

Endress+Hauser — Promass 83

Endress+Hauser PSIRTcritical

Published

4 October 2021

Last update

14 May 2025

Linked CVEs

CVE-2020-25159

Affected sectors

Risk evaluation

Promass 83 devices utilizing 499ES EtherNet/IP (ENIP) Stack by Real Time Automation (RTA) are vulnerable to a stack-based buffer overflow. Update A, 2021-10-07: added credits changed title from "ENDRESS+HAUSER: Promass 83 with Ether/IP affected by DoS vulnerability" to "ENDRESS+HAUSER: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow"

Mitigation summary

If an immediate firmware update is not possible, the only way to prevent an attack is to disable communication via EtherNet/IP.

Revision history (3)

  1. Initial publication — 4 October 2021

    Initial revision.

  2. Update A — 7 October 2021

    Update A

  3. Update B — 14 May 2025

    Fix: firmware category, added distribution

Official source: Endress+Hauser PSIRT