Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 02:05.

Filters

1 active
Reset filters

1 advisories found

VDE-2024-023

Welotec: Clickjacking Vulnerability in WebUI

Welotec — SmartEMS

Welotec PSIRTmiddel

Published

23 April 2024

Last update

23 April 2024

Linked CVEs

Affected sectors

Risk evaluation

Welotec has been informed by an external source that the WebUI of the device management solution "SMART EMS" and the remote connectivity solution "VPN Security Suite" is vulnerable to so-called "Clickjacking" and advises to update to version v3.1.4 or later.

Mitigation summary

This vulnerability can be mitigated with the use of an additional Reverse Proxy and / or Web Application Firewall protecting the WebUI.

Revision history (1)
  1. Initial publication — 23 April 2024

    Initial revision.

Official source: Welotec PSIRT