Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2023-050

Pilz: Vulnerability in PASvisu and PMI v8xx

Pilz — PMI v8xx

Pilz PSIRThigh

Published

30 January 2024

Last update

10 April 2025

Affected sectors

Risk evaluation

Multiple Pilz products are affected by stored cross-site-scripting (XSS) vulnerabilities. The vulnerabilities may enable an attacker to gain full control over the system. Update: 27.02.2024 Fix typo in advisory title

Mitigation summary

* Only use project files from trustworthy sources. * Protect project files against modification by unauthorized users. * PASvisu Runtime: Limit network access to legitimate connections by using a firewall or similar measures. Use password protection on the online project.

Revision history (4)
  1. Initial publication — 30 January 2024

    Initial revision.

  2. Update A — 27 February 2024

    Updated Title.

  3. Update B — 6 November 2024

    Fix: correct certvde domain, added self-reference

  4. Update C — 10 April 2025

    fixed version operators

Official source: Pilz PSIRT