CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 6 november 2026 om 23:32.
Filters
1 actief1 advisories gevonden
Gepubliceerd
2 november 2026
Laatste update
5 november 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Festo Didactic FactoryViews and MES4 deployed along with xampp bundle an Apache web server with PHP. The bundled version of PHP is vulnerable to the two critical vulnerabilities CVE-2026-109618 and CVE-2026-109619 (commonly referred to as PHP2Shell). These vulnerabilities allow an attacker to remotely execute code on the FactoryViews or xampp host system.
Mitigatiesamenvatting
Install patch 1.12.2 through the "Versions" page of the FactoryViews control panel on version 1.12.0 or 1.12.1. Versions of FactoryViews prior to 1.12 must first be updated to 1.12 available for download here: https://www.festo.com/de/de/support-portal-specific?query=factoryviews&groupId=4&productName=factoryviews&documentId=659952
Revisiegeschiedenis (2)
Initiële publicatie — 2 november 2026
Initial Revision
Update A — 5 november 2026
Adjusted information about vendor fix for FactoryViews