Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2026-077

Lenze: Incorrect signature validation in the enable SSH routine

Lenze — c4x0

Lenze PSIRThigh

Published

27 July 2026

Last update

27 July 2026

Linked CVEs

Affected sectors

Risk evaluation

The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which could allow unauthorized access to the device.

Mitigation summary

To resolve this security vulnerability, we recommend installing a firmware update. | Product | Firmware | Fixed Version | | --------------- | -------- | ------------- | | Controller c430 | c4xx | 1.15.2 | | c520 | c5xx | 1.15.2 | | c550 | c5xx | 1.15.2 | | i950 GenA | i950 | 1.15.0 | | i950 GenB | i950 | 2.0.3 |

Revision history (1)
  1. Initial publication — 27 July 2026

    Initial release.

Official source: Lenze PSIRT