Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 6 november 2026 om 21:58.

Filters

1 actief
Reset filters

1 advisories gevonden

SSA-045512

SSA-045512: Node2Shell Vulnerability in Siemens Products

Siemens — Desigo CC family V8

Siemens ProductCERTkritiek

Gepubliceerd

30 oktober 2026

Laatste update

6 november 2026

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products. Siemens has released new versions for the affected products and recommends to update to the latest versions.

Mitigatiesamenvatting

Update to V36.8.0 or later version

Revisiegeschiedenis (3)
  1. Initiële publicatie — 30 oktober 2026

    Publication Date

  2. Update A — 4 november 2026

    Added Desigo CC to the affected products list.

  3. Update B — 6 november 2026

    Added Gridscale X DSA and PSSE to the list of affected products

Officiële bron: Siemens ProductCERT