CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:04.

Filters

1 active

Reset filters

Search: VDE-2025-008

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2025-008

WAGO: Vulnerabilities in CODESYS Control

WAGO — CC100

WAGO PSIRThigh

Published

4 February 2025

Last update

14 May 2025

Linked CVEs

CVE-2023-6357

Affected sectors

Risk evaluation

The following firmware versions installed on several devices are are vulnerable due to a vulnerability in CODESYS Control.

Mitigation summary

The vulnerability is only exploitable if the an attacker has successfully logged in with according user rights. To prevent attackers from exploiting the vulnerability it is recommend to change the standard password in the web based management.

Revision history (3)

Initial publication — 4 February 2025
Initial release.
Update A — 19 February 2025
Update: fixed typo in Vendor fix, fixed version
Update B — 14 May 2025
Fix: added distribution

Official source: WAGO PSIRT