CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 01:34.

Filters

1 active

Reset filters

Search: VDE-2026-032

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2026-032

Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW

Endress+Hauser — Extractive Analyzer

Endress+Hauser PSIRThigh

Published

21 April 2026

Last update

21 April 2026

Linked CVEs

CVE-2025-32463

Affected sectors

Risk evaluation

The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability.

Mitigation summary

The display unit's firmware versions below 4.3.4 are affected. To address the vulnerability, customers are strongly recommended to update the display unit of their devices to firmware version 4.3.4. Endress+Hauser will include this firmware version in the MCS200HW products starting with version 1.11.5.6R. Alternatively, customers can contact Endress+Hauser directly to obtain the updated display firmware, or download the original firmware - including update instructions - from the Phoenix Contact website referenced below.

Revision history (1)

Initial publication — 21 April 2026
Initial version

Official source: Endress+Hauser PSIRT