CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:34.
Filters
1 actief1 advisories gevonden
Advisory2026-03_VDE-2026-018
CODESYS Control V3 - Externally-controlled format string in Auditlog
Risk evaluation
The CODESYS Control runtime system's CmpAuditLog component allows potentially unauthenticated remote attackers to control the format string of processed log messages. Due to the internal processing logic, the impact is limited to a crash of the CODESYS Control runtime.
Mitigatiesamenvatting
As a mitigation, the Audit Log feature can be disabled in the CODESYS Control runtime configuration file. When the Audit Log logger is not enabled, the affected functionality is no longer exposed and the vulnerability cannot be exploited. To disable the Audit Log feature, use the following settings. Depending on your existing configuration, the logger index may vary. [CmpLog] Logger.0.Name=.Audit.log Logger.0.Enable=0
Revisiegeschiedenis (2)
Initiële publicatie — 24 maart 2026
Initial revision.
Update A — 18 juni 2026
Updated remediation category - fixed SL runtimes are now available. Updated mitigation category - clarified description.