Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 03:07.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2020-014

Pepperl+Fuchs: Kr00k vulnerabilities in Broadcom Wi-Fi chipsets

Pepperl+Fuchs — Tab-Ex 02

Pepperl+Fuchs PSIRTlaag

Gepubliceerd

31 maart 2020

Laatste update

14 mei 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

Security researchers at ESET have reported a vulnerability called Kr00k (CVE-2019- 15126) which affects encrypted WiFi traffic for devices using Broadcom or Cypress chipsets. The vulnerability may allow an attacker to decrypt some WPA2- Personal/Enterprise traffic by forcing an AP/client to start utilizing an all-zero encryption key (similar to KRACK vulnerability).

Mitigatiesamenvatting

Pepperl+Fuchs is continuously and rigorously working closely with our partner to patch all affected Devices. Update for Tab-Ex 02 is planned for 05/2020 ECOM mobile devices are normally used in the corporate network. This implies that outgoing connections and local software installations have to be configured by administrators. It should be ensured that the data connections are additionally encrypted, e.g. HTTPS or SSH.

Revisiegeschiedenis (2)
  1. Initiële publicatie — 31 maart 2020

    Initial revision.

  2. Update A — 14 mei 2025

    Fix: version space

Officiële bron: Pepperl+Fuchs PSIRT