CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:04.

Filters

1 active

Reset filters

Search: VDE-2024-039

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2024-039

Phoenix Contact: Multiple Vulnerabilities in mGuard devices

Phoenix Contact — FL MGUARD

Phoenix Contact PSIRThigh

Published

10 September 2024

Last update

27 August 2025

Linked CVEs

CVE-2024-7698 CVE-2024-7699 CVE-2024-43384 CVE-2024-43385 CVE-2024-43386 CVE-2024-43387 CVE-2024-43388

Affected sectors

Risk evaluation

Confidential data in HTTP query string of user requests. Incomplete sanitation of user input in administrative web interface.

Mitigation summary

Read access to the device via administrative interfaces should be granted only to trustworthy users.

Revision history (4)

Initial publication — 10 September 2024
Initial revision.
Update A — 6 November 2024
Fix: correct certvde domain, added self-reference
Update B — 10 April 2025
Fixed csaf reference URL
Update C — 27 August 2025
Update: CWE from CVE-2024-43388, CVE-2024-43389, CVE-2024-43390, CVE-2024-43391, CVE-2024-43392, CVE-2024-43393, CVE-2024-7698, Revision History

Official source: Phoenix Contact PSIRT