CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: VDE-2022-019

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2022-019

Endress+Hauser: Multiple products utilizing vulnerable WIBU-SYSTEMS CodeMeter components

Endress+Hauser — DeviceCare

Endress+Hauser PSIRTcritical

Published

2 June 2022

Last update

2 June 2022

Linked CVEs

CVE-2021-22901 CVE-2021-41183 CVE-2021-41182 CVE-2020-8286 CVE-2021-41184 CVE-2021-20093 CVE-2021-41057

Affected sectors

Risk evaluation

For detailed information please refer to WIBU SYSTEMS original Advisories at https://wibu.com/support/security-advisories.html.

Mitigation summary

All vulnerabilities have already been fixed in several CodeMeter versions. Endress+Hauser recommends to use CodeMeter version >=7.40b. The version is available at https://www.wibu.com/support. For the Operating System WIN 7 it's recommended to update the operating system, use/re-install the Endress+Hauser Software Application supporting the newer operating system and update Code Meter to version >= 7.40b.

Revision history (1)

Initial publication — 2 June 2022
Initial revision.

Official source: Endress+Hauser PSIRT