CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 04:38.
Filters
1 active1 advisories found
Risk evaluation
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.
Mitigation summary
Update REX 200/250 to at least version 7.3.0\ **Note**: REX 300 is EOL and will not receive any further updates.
Revision history (1)
Initial publication — 31 July 2025
Initial revision.