CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.
Filters
1 actief1 advisories gevonden
VDE-2021-040
Endress+Hauser: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow
Risk evaluation
Promass 83 devices utilizing 499ES EtherNet/IP (ENIP) Stack by Real Time Automation (RTA) are vulnerable to a stack-based buffer overflow. Update A, 2021-10-07: added credits changed title from "ENDRESS+HAUSER: Promass 83 with Ether/IP affected by DoS vulnerability" to "ENDRESS+HAUSER: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow"
Mitigatiesamenvatting
If an immediate firmware update is not possible, the only way to prevent an attack is to disable communication via EtherNet/IP.
Revisiegeschiedenis (3)
Initiële publicatie — 4 oktober 2021
Initial revision.
Update A — 7 oktober 2021
Update A
Update B — 14 mei 2025
Fix: firmware category, added distribution