CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:32.
Filters
1 actief1 advisories gevonden
VDE-2021-044
Endress+Hauser: Multiple products affected by log4net vulnerability
Risk evaluation
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
Mitigatiesamenvatting
Make sure that no unauthorized access to the production environment is possible. Avoid using the above listed software with Windows administrator privileges if other users with lower privileges have access to the same software installation.
Revisiegeschiedenis (3)
Initiële publicatie — 20 januari 2022
Initial revision.
Update A — 12 februari 2025
Fix: corrected self-reference, fixed version
Update B — 14 mei 2025
Fix: added distribution