Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 8 November 2026 at 02:11.

Filters

1 active
Reset filters

1 advisories found

VDE-2025-076

Welotec: Hard-coded JWT secret in egOS WebGUI

Welotec — EG400Mk2

Welotec PSIRTcritical

Published

26 August 2025

Last update

26 August 2025

Linked CVEs

Affected sectors

Risk evaluation

A hard-coded JWT secret in the egOS WebGUI backend is readable to the default user, allowing attackers to forge valid tokens and access protected API endpoints.

Mitigation summary

Temporarily disable the WebGUI or restrict network access to the WebGUI to trusted admin stations.

Revision history (1)
  1. Initial publication — 26 August 2025

    initial version

Official source: Welotec PSIRT