CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:04.

Filters

1 actief

Reset filters

Zoeken: FSA-202203

Zoeken

Leverancier

Protocol

Sector

Ernst

Bron

1 advisories gevonden

FSA-202203

Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system

Festo — Controller CECC-D

Festo PSIRTkritiek

Gepubliceerd

18 juli 2022

Laatste update

10 juli 2025

Gekoppelde CVE's

CVE-2019-5105 CVE-2021-29241 CVE-2021-29242 CVE-2022-22519 CVE-2022-22517 CVE-2022-22515 CVE-2022-22514 CVE-2022-22513 CVE-2021-36763 CVE-2021-33485 CVE-2020-12068 CVE-2020-10245

Getroffen sectoren

Energieopwekking

Risk evaluation

The Festo controller CECC product family in firmware version 2.4.2.0 is affected by multiple vulnerabilities in the CODESYS V3 runtime.

Mitigatiesamenvatting

No fix planned. This issue will be handled with next hardware generation release.

Revisiegeschiedenis (3)

Initiële publicatie — 18 juli 2022
Initial version.
Update A — 11 januari 2024
Adjust link to VDE Advisory, TLP and update some CVE information, where CVSS was not known before.
Update B — 10 juli 2025
Adjusted to VDE template. Changed document title from 'Festo Controller CECC-S,-LK,-D Family Firmware = 2.4.2.0 - Multiple Vulnerabilities in CODESYS V3 Runtime System' to' Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system'. Updated legal disclaimer to add references to special provisions.

Officiële bron: Festo PSIRT