CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:04.
Filters
1 actief1 advisories gevonden
FSA-202208
Festo: Multiple Festo products contain an unsafe default Codesys configuration
Gepubliceerd
29 november 2022
Laatste update
28 oktober 2025
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
The products are shipped with an unsafe configuration of the integrated CODESYS Runtime environment. In this case no default password is set to the CODESYS PLC and therefore access without authentication is possible. With a successful established connection to the CODESYS Runtime the PLC-Browser commands are available. Thus granting the possibilities to e.g. read and modify the configuration file(s), start/stop the application and reboot the device.
Mitigatiesamenvatting
Festo has identified the following compensatory measures to reduce the risk: - For CVE-2022-22515: Using the online user management prevents an attacker from downloading and execute malicious code, but also suppresses start, stop, debug, or other actions on a known working application that could potentially disrupt a machine or system.
Revisiegeschiedenis (3)
Initiële publicatie — 29 november 2022
Initial revision.
Update A — 11 januari 2024
Adjust link to VDE Advisory
Update B — 28 oktober 2025
Adjusted to VDE template. Changed title from "Multiple Festo products contain an unsafe default Codesys configuration" to "Festo: Multiple Festo products contain an unsafe default Codesys configuration". Updated legal disclaimer to add references to special provisions.