CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 8 november 2026 om 08:48.
Filters
1 actief1 advisories gevonden
SA25P004
Automation Studio Insufficient Server Certificate Validation
Gepubliceerd
19 januari 2026
Laatste update
14 mei 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability. Successful exploitation of this vulnerability may enable an attacker to masquerade as a trusted party when B&R Automation Studio establishes a connection with a server via the ANSL over TLS or OPC-UA protocol.
Mitigatiesamenvatting
The problem is corrected in the following product versions: B&R Automation Studio version 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is de-scribed in the user manual.
Revisiegeschiedenis (2)
Initiële publicatie — 19 januari 2026
Initial Version
Update A — 14 mei 2026
Corrected vendor name from 'ABB' to 'B&R Industrial Automation GmbH' to ensure accurate product matching.