CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.
Filters
1 active1 advisories found
VDE-2021-041
Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability
Published
26 October 2021
Last update
22 May 2025
Linked CVEs
Affected sectors
Control centres
Risk evaluation
Critical vulnerabilities have been discovered in the utilized component log4net by Apache Software Foundation. UPDATE A: Remediation: added fixed VisuNet Products
Mitigation summary
External countermeasures are needed for the remaining products. The following protective measure is required for VisuNet devices and the PCs/Servers with an installed DTM: Restrict local access to the device, PC/Server and use user authentication to prevent unauthorized access.
Revision history (3)
Initial publication — 26 October 2021
Initial revision.
Update A — 17 January 2022
UPDATE A: add list of affected VisuNet products
Update B — 22 May 2025
Fix: firmware category, quotation mark