CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2022-050

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2022-050

IFM: weak password recovery vulnerability in moneo appliance

ifm — QHA210

ifm PSIRTcritical

Published

12 December 2022

Last update

6 January 2026

Linked CVEs

CVE-2022-3485

Affected sectors

Risk evaluation

An unauthenticated remote attacker could reset the administrator's password with information from the default, self-signed certificate.

Mitigation summary

The certificate is renewed by adjusting the hostname to an own customer-specific, so it does not contain the serial number.

Revision history (2)

Initial publication — 12 December 2022
Initial revision.
Update A — 6 January 2026
fixed version range, added Hardware with relationship, changed vulnerability title to CVE description

Official source: ifm PSIRT