CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 03:07.
Filters
1 actief1 advisories gevonden
Risk evaluation
Pepperl+Fuchs analyzed WirelessHART-Gateways in respect of a critical vulnerability within the Firmware. An attacker may exploit this vulnerability to get access to files and access restricted directories that are stored on the device by manipulating file parameters that reference these. Incoming HTTP requests using fcgi-bin/wgsetcgi and a filename parameter allow a directory / path traversal. A publicly available exploit already exists for this vulnerability.
Mitigatiesamenvatting
A Firmware (version see table below), which solves the problem, is available. Please contact your support representative for this particular firmware package and update the corresponding product. | Product ID | Version | Bus-Interface of Device | |-----------------|----------|-------------------------| | WHA-GW-*-ETH | 03.00.08 | Modbus | | WHA-GW-*-ETH.EIP | 02.00.01 | Ethernet/IP |
Revisiegeschiedenis (4)
Initiële publicatie — 6 maart 2019
Initial revision.
Update A — 6 november 2024
Fix: correct certvde domain, added self-reference
Update B — 12 maart 2025
Fix: Version, Remediation
Update C — 14 mei 2025
Fix: added distribution