CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.
Filters
1 active1 advisories found
VDE-2025-067
Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
Risk evaluation
Motherbox 3 with firmware 1.44 to 1.48 allows an unauthenticated remote attacker read-only access to the internal DB with measurement values from other W&T sensor devices.
Mitigation summary
Access to the database should be limited to trustworthy networks or peers.
Revision history (3)
Initial publication — 10 August 2025
Initial revision
Update A — 25 August 2025
Changed CVE Score from C:L to C:H and changed in the CVE Description the word "grants" to "get"
Update B — 3 July 2026
Fixed Vendor Variable in Product tree