CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.
Filters
1 active1 advisories found
VDE-2024-033
PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service
Published
13 August 2024
Last update
14 May 2025
Linked CVEs
Affected sectors
Risk evaluation
Vulnerabilities have been discovered in the product, mainly caused by HTML injection and crosssite-scripting. The impact of the vulnerability on the affected device may result in an information disclosure and denial of service.
Mitigation summary
Update to a new version of the firmware you are using: * SocketServer v11.66 * PROFINET v3.4.10 * PROFINET/Modbus v1.0.8 * EtherNet/IP v7.23 * EIP/Modbus v1.09 * Modbus Router v7.10 * Modbus Server v7.12 * Modbus TCP v7.12
Revision history (3)
Initial publication — 13 August 2024
Initial revision.
Update A — 6 November 2024
Fix: correct certvde domain, added self-reference
Update B — 14 May 2025
Fix: version space