CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 15:23.
Filters
1 actief1 advisories gevonden
SSA-693808
SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms
Gepubliceerd
12 augustus 2025
Laatste update
13 oktober 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within the affected application and its privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
Mitigatiesamenvatting
On Desktop systems: Execute affected software on Windows hosts where only a single user is configured
Revisiegeschiedenis (4)
Initiële publicatie — 12 augustus 2025
Publication Date
Update A — 14 oktober 2025
Added no fix expected for PCS neo V5.0, added fix for TIA Portal V20
Update B — 9 december 2025
Added fix for Totally Integrated Automation Portal (TIA Portal) V17
Update C — 9 juni 2026
Added fix for SIMATIC PCS NEO V6.0