Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 05:40.

Filters

1 active
Reset filters

1 advisories found

VDE-2025-048

WAGO: Escalation of Privileges in Coupler Firmware

WAGO — 750 Fieldbus Coupler

WAGO PSIRThigh

Published

8 September 2025

Last update

8 September 2025

Linked CVEs

Affected sectors

Risk evaluation

A design flaw in the file system management exposes internal system partitions - intended to be hidden - during brief moments when they are mounted by the firmware. These partitions contain sensitive data such as firmware and certificates. Although access to the file system is mediated by a Nucleus layer that supports permission control, these permissions are currently not enforced. As a result, services like FTP/SFTP may inadvertently gain access to critical internal resources, increasing the risk of unauthorized access or data leakage.

Mitigation summary

Update to Firmware version 13.

Revision history (1)
  1. Initial publication — 8 September 2025

    initial version

Official source: WAGO PSIRT