CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2024-002

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2024-002

Pilz: Multiple products affected by uC/HTTP vulnerability

Pilz — PIT gb RLLE y down ETH

Pilz PSIRTcritical

Published

6 February 2024

Last update

6 February 2024

Linked CVEs

CVE-2023-31247 CVE-2023-28379 CVE-2023-28391 CVE-2023-27882 CVE-2023-25181 CVE-2023-24585

Affected sectors

Risk evaluation

The PITreader product family is using the 3rd -party-component uC/HTTP to implement the web server functionality. uC/HTTP is affected by multiple vulnerabilities. These vulnerabilities may enable an attacker to gain full control over the system.

Mitigation summary

Install the fixed firmware version. Please visit the Pilz Website to download the latest firmware update. Instructions about installing the firmware update can be found in the user manual. Limit network access to legitimate connections by using a firewall or similar measures.

Revision history (1)

Initial publication — 6 February 2024
Initial revision.

Official source: Pilz PSIRT