CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:04.
Filters
1 actief1 advisories gevonden
FSA-202202
Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system
Gepubliceerd
18 juli 2022
Laatste update
3 november 2025
Gekoppelde CVE's
Getroffen sectoren
Energieopwekking
Risk evaluation
The Festo controller CECC product family is affected by multiple vulnerabilities in the CODESYS V3 runtime.
Mitigatiesamenvatting
For CVE-2019-5105, CVE-2019-9011, CVE-2019-9013, CVE-2020-10245, CVE-2020-12067, CVE-2020-12068, CVE-2020-12069, CVE-2020-15806, CVE-2021-29241, CVE-2021-29242, CVE-2021-33485, CVE-2021-36763, CVE-2021-36764, CVE-2022-22513, CVE-2022-22514, CVE-2022-22515, CVE-2022-22517, CVE-2022-22519: No fix planned. This issue will be handled with next hardware generation release.
Revisiegeschiedenis (4)
Initiële publicatie — 18 juli 2022
Initial revision.
Update A — 11 januari 2024
Adjust link to VDE Advisory, TLP and update some CVE information, where CVSS was not known before.
Update B — 28 juli 2025
Adjusted to VDE template. Changed title from 'Festo Controller CECC-S,-LK,-D Family Firmware <= 2.3.8.1 - Multiple Vulnerabilities in CODESYS V3 Runtime System' to 'Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system'. Updated legal disclaimer to add references to special provisions.
Update C — 3 november 2025
Add missing CWE values for vulnerabilities. Add missing CVSS 3.0 score for CVE-2010-5250.