CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.

Filters

1 active

Reset filters

Search: VDE-2024-032

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2024-032

Helmholz: REX 100 vulnerable to OS command injection

Helmholz — REX 100

Helmholz PSIRThigh

Published

3 July 2024

Last update

3 July 2024

Linked CVEs

CVE-2024-5672

Affected sectors

Risk evaluation

There exists a vulnerability in all REX 100 devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30pm In section Reported by Sebastian Dietz (CyberDanube) was added.

Mitigation summary

As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.

Revision history (2)

Initial publication — 3 July 2024
Initial revision.
Update A — 3 July 2024
In section Reported by Sebastian Dietz (CyberDanube) was added.

Official source: Helmholz PSIRT