CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.
Filters
1 active1 advisories found
VDE-2025-032
Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting
Risk evaluation
Multiple W&T Products are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via crafted payloads injected into several input fields of the configuration webpage.
Mitigation summary
Access to the WBM should be limited to trustworthy networks or peers.
Revision history (1)
Initial publication — 6 May 2025
Initial revision