CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:04.

Filters

1 active

Reset filters

Search: VDE-2024-047

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2024-047

WAGO: Multiple vulnerabilities in docker configuration

WAGO — CC100

WAGO PSIRThigh

Published

18 November 2024

Last update

22 May 2025

Linked CVEs

CVE-2024-41967 CVE-2024-41968 CVE-2024-41969 CVE-2024-41970 CVE-2024-41971 CVE-2024-41972 CVE-2024-41973

Affected sectors

Risk evaluation

Nozomi reported eight vulnerabilities to WAGO affecting different firmwares installed on several devices.

Mitigation summary

Update to Firmware 4.6.1 (FW28) or for CC100 devices to 4.6.3 (FW28). For G1 devices update to Firmware 3.10.11 (FW22 Patch 2). For the latest Custom Firmware, please contact the WAGO support.

Revision history (4)

Initial publication — 18 November 2024
Initial document.
Update A — 30 January 2025
Added known mitigations as remediation. Added the Custom Firmware to the product branch. Added firmware 3.10.11 (Firmware 22 Patch 2) to the fixed products. This version was in revision 1 listed as vulnerable.
Update B — 12 February 2025
Fix: corrected self-reference, fixed version
Update C — 22 May 2025
Fix: quotation mark

Official source: WAGO PSIRT