CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.
Filters
1 active1 advisories found
VDE-2024-054
Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities
Published
21 October 2024
Last update
22 May 2025
Affected sectors
Risk evaluation
Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.
Mitigation summary
If an immediate firmware update is not possible, the only way to prevent an attack is to prevent the access of the Web Based Management tool from the internet. This can be achieved by using a network element, such as a router, which hides and secures the components from the internet.
Revision history (3)
Initial publication — 21 October 2024
Initial revision.
Update A — 6 November 2024
Fix: correct certvde domain, added self-reference
Update B — 22 May 2025
Fix: version space, quotation mark