CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 23:37.
Filters
1 active1 advisories found
VDE-2025-095
WAGO: Vulnerabilities in WAGO Industrial-Managed Switches
Published
10 December 2025
Last update
19 January 2026
Linked CVEs
Affected sectors
Risk evaluation
Two remote stack buffer overflow vulnerabilities were discovered in WAGO industrial switches. These issues originate from unsafe input handling in custom HTTP request parsing functions within the lighttpd binary. The affected binary lacks modern security features such as PIE and RELRO, increasing the risk of successful exploitation.
Mitigation summary
Please update your devices to the specified fixed firmware version.
Revision history (3)
Initial publication — 10 December 2025
Initial release.
Update A — 11 December 2025
Updated CVSS-Scores
Update B — 19 January 2026
Updated model numbers.