Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.

Filters

1 active
Reset filters

1 advisories found

VDE-2024-031

Helmholz: Vulnerabilities in myREX24 V2/myREX24.virtual

Helmholz — myREX24

Helmholz PSIRTcritical

Published

18 March 2025

Last update

14 May 2025

Affected sectors

Risk evaluation

The data24 service that is bundled with every installation of myREX24 V2/myREX24.virtual has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.

Mitigation summary

Update to latest version: 2.16.2 CVE-2024-23943: This fix does not apply to REX 200/REX 250 devices with firmware 8.0.0 - 8.1.3. If you are using a device with this firmware, please update it to >= 8.2.0.

Revision history (4)
  1. Initial publication — 18 March 2025

    Initial revision.

  2. Update A — 18 March 2025

    Update: Changed Product name

  3. Update B — 10 April 2025

    Update: fixed CSAF-Reference URL, changed url in credits, removed whitespace after version operator

  4. Update C — 14 May 2025

    Fix: added distribution

Official source: Helmholz PSIRT