CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.

Filters

1 active

Reset filters

Search: VDE-2022-056

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2022-056

Weidmueller: Multiple IoT and control products affected by JavaScript injection vulnerability

Weidmüller — 19 IOT MD01 LAN H4 S0011

Weidmüller PSIRTmiddel

Published

14 December 2022

Last update

14 December 2022

Linked CVEs

CVE-2022-3073

Affected sectors

Risk evaluation

A JavaScript injection vulnerability has been discovered in the XML editing system SCHEMA ST4 onlinehelp by Quanos Solutions GmbH. For details refer to CVE.This vulnerability may allow an attacker to inject JavaScript code via URL to the affected products

Mitigation summary

If the remediation cannot be implemented in a timely manner, Weidmueller strongly recommends that the authenticated user logged in to the product does not click on links from external sources.

Revision history (1)

Initial publication — 14 December 2022
Initial revision.

Official source: Weidmüller PSIRT