CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 8 november 2026 om 06:46.
Filters
1 actief1 advisories gevonden
SSA-834709
SSA-834709: Missing Authentication Vulnerability in Node-RED on SIMATIC IoT2050 with Industrial OS
Gepubliceerd
11 augustus 2026
Laatste update
4 november 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
SIMATIC IoT2050 devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
Mitigatiesamenvatting
Harden the Node-RED installation (see Node-RED User Guide)
Revisiegeschiedenis (2)
Initiële publicatie — 11 augustus 2026
Publication Date
Update A — 4 november 2026
Clarified Affected products list. Updated title. Updated summary.