CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active

Reset filters

Search: VDE-2021-049

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2021-049

WAGO: Denial of Service Vulnerability in CODESYS Runtime 2.3

WAGO — PFC200

WAGO PSIRThigh

Published

16 November 2021

Last update

22 May 2025

Linked CVEs

CVE-2021-34593

Affected sectors

Risk evaluation

A Denial-of-Service Vulnerability was reported in CODESYS 2.3 Runtime. The CODESYS 2.3 Runtime is an essential component in several WAGO PLC's. All vulnerable PLCs are listed in chapter 'Affected Products'.

Mitigation summary

1. Use general security best practices to protect systems from local and network attacks. 2. Do not allow direct access to the device from untrusted networks. 3. Update to the latest firmware according to the table in chapter solutions. 4. Disable the CODESYS 2.3 port 2455.

Revision history (2)

Initial publication — 16 November 2021
initial revision
Update A — 22 May 2025
Fix: version space, added distribution, quotation mark

Official source: WAGO PSIRT