CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active

Reset filters

Search: VDE-2025-002

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2025-002

PEPPERL+FUCHS: HMI – devices are affected by Windows RCE

Pepperl+Fuchs — Native Windows

Pepperl+Fuchs PSIRTcritical

Published

25 February 2025

Last update

22 May 2025

Linked CVEs

CVE-2024-38063

Affected sectors

Risk evaluation

An unauthenticated attacker could repeatedly send IPv6 packets, that include specially crafted packets, to a Windows machine which could enable remote code execution.

Mitigation summary

Please install:<br>RM Shell 5 based on Windows 10 LTSB 2016: 18-33624T Windows Cumulative Security Patch - 2024-08 for RM Image 5 based on Windows 10 LTSB 2016 (KB5041773) found at Thin Client Firmware VisuNet RM Shell 5 (2016 LTSB) (pepperl-fuchs.com).

Revision history (3)

Initial publication — 25 February 2025
Initial revision.
Update A — 10 April 2025
fixed reference urls
Update B — 22 May 2025
Fix: added distribution, quotation mark

Official source: Pepperl+Fuchs PSIRT