CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 15:23.
Filters
1 actief1 advisories gevonden
SSA-493396
SSA-493396: Deserialization Vulnerability in Siemens Engineering Platforms
Gepubliceerd
12 augustus 2025
Laatste update
13 oktober 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
Mitigatiesamenvatting
Only open projects from trusted sources.
Revisiegeschiedenis (4)
Initiële publicatie — 12 augustus 2025
Publication Date
Update A — 14 oktober 2025
Added fix for TIA Portal V20
Update B — 9 december 2025
Added fix for Totally Integrated Automation Portal (TIA Portal) V17
Update C — 13 oktober 2026
Added fix version for SIMATIC STEP 7 V18, and SIMATIC WinCC V18