CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active

Reset filters

Search: VDE-2022-002

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2022-002

WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro

WAGO — e!COCKPIT

WAGO PSIRThigh

Published

31 January 2022

Last update

22 May 2025

Linked CVEs

CVE-2021-41057

Affected sectors

Risk evaluation

A vulnerability is reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (CODESYS 2.3) installations. All currently existing e!COCKPIT installation bundles and WAGO-I/O-Pro (CODESYS 2.3) installation bundles are affected with vulnerable versions of WIBU-SYSTEMS Codemeter.

Mitigation summary

Mitigation Use general security best practices to protect systems from local and network attacks. Disable the container type 'Mass Storage' in CodeMeter via the Windows Registry.

Revision history (2)

Initial publication — 31 January 2022
Initial revision.
Update A — 22 May 2025
Fix: quotation mark

Official source: WAGO PSIRT