CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 22:05.

Filters

1 active

Reset filters

Search: VDE-2025-057

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2025-057

WAGO: Vulnerability in WAGO Device Sphere

WAGO — Device Sphere

WAGO PSIRTcritical

Published

23 June 2025

Last update

7 July 2025

Linked CVEs

CVE-2025-41672

Affected sectors

Risk evaluation

During installation, identical certificates are installed across all systems instead of unique ones, which are intended for JWT Token encryption and signing.

Mitigation summary

Update to WAGO Device Sphere version 1.0.1. WAGO Device Sphere version 1.0 can't be used after the 30.06.2025.

Revision history (2)

Initial publication — 12 June 2025
Initial release.
Update A — 7 July 2025
fixed typo in CVE-ID

Official source: WAGO PSIRT