Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2024-053

Lenze: Install Directory with insufficient permissions

Lenze — EASY UI Designer

Lenze PSIRThigh

Published

3 September 2024

Last update

13 March 2025

Linked CVEs

Affected sectors

Risk evaluation

The following tools: * VisiWinNET Smart * VisiWinNET Professional * EASY UI Designer create a directory with insufficient permissions, allowing a low-level user the ability to add and modify certain files that hold SYSTEM privileges, which could lead to privilege escalation.

Mitigation summary

Only use this tool in a protected and controlled environment to minimize network impact and to ensure that the tool is inaccessable from outside. In addition, the use of firewalls is recommended to reduce the attack surface, specially to the internet and the internal business network.

Revision history (3)
  1. Initial publication — 21 August 2024

    Initial revision.

  2. Update A — 6 November 2024

    Fix: correct certvde domain, added self-reference

  3. Update B — 13 March 2025

    Fix: product version

Official source: Lenze PSIRT