CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 05:40.
Filters
1 active1 advisories found
VDE-2024-030
MB connect line: mbNET.mini vulnerable to OS command injection
Risk evaluation
There exists a vulnerability in all mbNET.mini devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30 pm In section Reported by Sebastian Dietz (CyberDanube) was added.
Mitigation summary
As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.
Revision history (1)
Initial publication — 3 July 2024
Initial revision.