Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.

Filters

1 active
Reset filters

1 advisories found

VDE-2024-010

Vulnerabilities in mbCONNECT24/mymbCONNECT24

MB connect line — mbCONNECT24

MB connect line PSIRTcritical

Published

18 March 2025

Last update

27 August 2025

Affected sectors

Risk evaluation

The data24 service that is bundled with every installation of mbCONNECT24/mymbCONNECT24 has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.

Mitigation summary

Update to latest version: 2.16.2 CVE-2024-23943: This fix does not apply to mbNET/mbNET.rokey devices with firmware 8.0.0 - 8.1.3. If you are using a device with this firmware, please update it to >= 8.2.0.

Revision history (4)
  1. Initial publication — 18 March 2025

    Initial revision.

  2. Update A — 31 March 2025

    Update: Fixed Document reference CSAF

  3. Update B — 10 April 2025

    Update: Fixed document reference URL

  4. Update C — 14 May 2025

    Fix: added distribution

Official source: MB connect line PSIRT