CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 14:22.
Filters
1 active1 advisories found
VDE-2026-071
JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices
Published
23 June 2026
Last update
8 July 2026
Linked CVEs
Affected sectors
Risk evaluation
Multiple products from JUMO are affected by webserver vulnerability "CVE-2013-6786, CVE-2014-9222, CVE-2014-9223. This vulnerability leads to DOS of the device by using a misfortune cookie and reflected XSS attacks.
Mitigation summary
Update affected devices to: Version 248.05.02 for JUMO mTRON T Central Processing Unit Version 249.05.03 for JUMO mTRON T Multifunction panel 840 Version 266.04.07 for JUMO DICON touch Version 304.09.04 for JUMO AQUIS touch
Revision history (2)
Initial publication — 23 June 2026
initial release
Update A — 8 July 2026
Updated the relationship identifier and adjusted the starting versions in the product tree version ranges.