CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 13:21.
Filters
1 actief1 advisories gevonden
SEVD-2026-013-01
Multiple Third-Party Vulnerabilities on ProLeiT Plant iT/Brewmaxx
Gepubliceerd
13 januari 2026
Laatste update
10 maart 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Schneider Electric is aware of multiple vulnerabilities in Redis open-source database, affecting its Plant iT product. The [Plant iT/Brewmaxx](https://www.proleit.com/plant-it/) product is an object-oriented and PLC-based process control system with integrated Manufacturing Execution System functionality. The integrated and modular software platform consists of basic systems, modules and add-ons that can be flexibly combined. Failure to apply the remediations provided below may risk privilege escalation, which could result in remote code execution.
Mitigatiesamenvatting
Patch ProLeiT-2025-001 includes a fix to reduce the risk of exploit: • Install the patch to disable the eval commands in Redis on: o Application Server o VisuHub o Engineering Workstations o Workstation with emergency mode functionality • The patch ProLeiT-2025-001 is available via ProLeiT Support: https://www.proleit.com/support/ • Force usage of secure Redis configuration templates in system settings as documented in the patch manual. • Restart all patched Servers and Workstations
Revisiegeschiedenis (2)
Initiële publicatie — 13 januari 2026
Original Release
Update A — 10 maart 2026
Updated the CWE description of CVE-2025-46819