Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 00:02.

Filters

1 active
Reset filters

1 advisories found

VDE-2025-109

Phoenix Contact: Unbounded growth of the session cache in TCP encapsulation service in FL MGUARD 2xxx and 4xxx firmware

Phoenix Contact — FL MGUARD

Phoenix Contact PSIRTmiddel

Published

10 February 2026

Last update

23 February 2026

Linked CVEs

Affected sectors

Risk evaluation

The OpenSSL library used in the affected products is vulnerable to an unbounded growth of the session cache in the TLSv1.3 implementation.

Mitigation summary

It is recommended to disable TCP encapsulation on affected mGuard devices and use Pathfinder instead.

Revision history (2)
  1. Initial publication — 10 February 2026

    Initial release.

  2. Update A — 23 February 2026

    Updated category type in product tree.

Official source: Phoenix Contact PSIRT