CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: VDE-2025-074

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2025-074

Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers

Phoenix Contact — CHARX SEC

Phoenix Contact PSIRThigh

Published

14 October 2025

Last update

15 October 2025

Linked CVEs

CVE-2025-41699

Affected sectors

Risk evaluation

A vulnerability in the firmware of CHARX SEC-3xxx charging controllers has been discovered.

Mitigation summary

This product was designed for use in closed industrial networks. Phoenix Contact strongly recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our [application note](https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf).

Revision history (2)

Initial publication — 8 July 2025
Initial Revision
Update A — 15 October 2025
Updated the reporting credits, corrected reference token for one product, fixed typo in Document notes

Official source: Phoenix Contact PSIRT