CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: VDE-2025-040

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2025-040

WAGO: Vulnerabilities in ctrlX OS app

WAGO — Edge Controller

WAGO PSIRThigh

Published

16 June 2025

Last update

16 June 2025

Linked CVEs

CVE-2025-24338 CVE-2025-24339 CVE-2025-24340 CVE-2025-24341 CVE-2025-24342 CVE-2025-24343 CVE-2025-24344

Affected sectors

Risk evaluation

The base ctrlX OS apps Device Admin and Solutions contain multiple vulnerabilities. In a worst case scenario, a remote authenticated (low-privileged) attacker might be able to execute arbitrary OS commands running with higher privileges.

Mitigation summary

Update to Solutions 2.6.1 which is available in the WAGO Download center.

Revision history (1)

Initial publication — 16 June 2025
Initial release.

Official source: WAGO PSIRT