CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 02:35.
Filters
1 active1 advisories found
VDE-2024-017
Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities
Published
10 April 2024
Last update
18 May 2026
Affected sectors
Risk evaluation
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
Mitigation summary
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
Revision history (3)
Initial publication — 10 April 2024
Initial revision.
Update A — 22 May 2025
Fix: quotation mark
Update B — 18 May 2026
added score to vulnerability, Added CPEs, added last affected products to vulnerabilities