CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active

Reset filters

Search: VDE-2021-061

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2021-061

Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities

Pilz — PMC programming tool 3.x.x

Pilz PSIRTcritical

Published

26 April 2022

Last update

26 April 2022

Linked CVEs

CVE-2020-14513 CVE-2020-14509 CVE-2019-13538 CVE-2021-29240 CVE-2021-29239 CVE-2021-21869 CVE-2021-21868 CVE-2019-9009 CVE-2020-14515 CVE-2020-14517 CVE-2020-7052 CVE-2020-14519 CVE-2021-29241 CVE-2021-29242 CVE-2020-16233 CVE-2019-5105

Affected sectors

Risk evaluation

The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.

Mitigation summary

Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.

Revision history (1)

Initial publication — 26 April 2022
Initial revision.

Official source: Pilz PSIRT