Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 03:07.

Filters

1 actief
Reset filters

1 advisories gevonden

PPSA-2025-002

Pilz: Missing Authentication in Node-RED integration

Pilz — IndustrialPI 4

Pilz PSIRTkritiek

Gepubliceerd

1 juli 2025

Laatste update

1 juli 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

Authentication is not configured by default for the Node-RED server on the Pilz industrial PC IndustrialPI. An unauthenticated remote attacker has full access to the Node-RED server and can run arbitrary operating system commands on the underlying operating system with privileged rights.

Mitigatiesamenvatting

Consult our PDF with remediations which you can find under [www.pilz.com/downloads](https://www.pilz.com/search#currentPage=1&SEARCH=Security%20Advis.%20IndustrialPI%20Remediat.). In order to activate the authentication as described in the PDF, you have to have the Node-RED service enabled via the web application.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 1 juli 2025

    Initial Version

Officiële bron: Pilz PSIRT