CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.
Filters
1 active1 advisories found
VDE-2022-057
Wiesemann & Theis multiple products prone to web interface vulnerability
Risk evaluation
Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user.
Mitigation summary
Update Com-Server family to version 1.55 Update Com-Server Highspeed family to version 1.78 or higher
Revision history (2)
Initial publication — 13 December 2022
Initial revision.
Update A — 14 May 2025
Fix: added distribution