CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:04.

Filters

1 active

Reset filters

Search: VDE-2022-009

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2022-009

WAGO: Multiple Products affected by Linux Kernel Vulnerability Dirty Pipe

WAGO — PFC100

WAGO PSIRThigh

Published

6 April 2022

Last update

22 May 2025

Linked CVEs

CVE-2022-0847

Affected sectors

Risk evaluation

The Linux kernel starting from 5.8 has a flaw which can lead to privilege escalation for a local user. The kernel is used in several Versions of the FW of several WAGO products. All vulnerable PLCs are listed in chapter 'Affected Products'.

Mitigation summary

- Restrict network access to the device. - Use strong passwords - Do not directly connect the device to the internet - Disable unused TCP/UDP-ports

Revision history (2)

Initial publication — 6 April 2022
Initial revision.
Update A — 22 May 2025
Fix: quotation mark

Official source: WAGO PSIRT