Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2024-065

PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key

Pepperl+Fuchs — BTC22-*

Pepperl+Fuchs PSIRTmiddel

Published

26 November 2024

Last update

14 May 2025

Linked CVEs

Affected sectors

Risk evaluation

A vulnerability in the use of hard-coded Platform Keys (PK) within the UEFI framework, known as PKfail, has been discovered in several Pepperl+Fuchs devices.

Mitigation summary

Protect the device from unauthorized physical access.

Revision history (2)
  1. Initial publication — 26 November 2024

    Initial revision.

  2. Update A — 14 May 2025

    Fix: version space

Official source: Pepperl+Fuchs PSIRT