CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 14:22.
Filters
1 actief1 advisories gevonden
Gepubliceerd
22 oktober 2026
Laatste update
22 oktober 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
ABB identified a critical vulnerability present in ABB Ability Edgenius versions 3.2.3.0 and below. We have not received any reports of this vulnerability being exploited. This issue may allow unauthorized manipulation of the edge authentication database if successfully exploited. ABB has developed and released a corrective update that resolves this vulnerability and enhances the security posture of the affected system.
Mitigatiesamenvatting
Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove exposure with well-known impact on functionality. For brownfield customers, ABB provides a Kubernetes network policy that restricts access to Edge Authentication Database (AuthDB) to the authorized services required for normal operation of an already deployed and configured system. For implementation details, refer to Technical Description-ABB Ability Edgenius Missing Authentication in Edgenius AuthDB.docx (7PAA025722) listed in the reference section, distributed separately.
Revisiegeschiedenis (1)
Initiële publicatie — 22 oktober 2026
Initial version.