CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.

Filters

1 actief

Reset filters

Zoeken: VDE-2021-061

Zoeken

Leverancier

Protocol

Sector

Ernst

Bron

1 advisories gevonden

VDE-2021-061

Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities

Pilz — PMC programming tool 3.x.x

Pilz PSIRTkritiek

Gepubliceerd

26 april 2022

Laatste update

26 april 2022

Gekoppelde CVE's

CVE-2020-14513 CVE-2020-14509 CVE-2019-13538 CVE-2021-29240 CVE-2021-29239 CVE-2021-21869 CVE-2021-21868 CVE-2019-9009 CVE-2020-14515 CVE-2020-14517 CVE-2020-7052 CVE-2020-14519 CVE-2021-29241 CVE-2021-29242 CVE-2020-16233 CVE-2019-5105

Getroffen sectoren

Risk evaluation

The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.

Mitigatiesamenvatting

Use a hardware firewall, host-based firewall or comparable measures at network level toprotect against unauthorised network communication with the PC. Use a virus scanner or other measures to protect against malware. Only use CODESYS libraries and archives from trusted sources.

Revisiegeschiedenis (1)

Initiële publicatie — 26 april 2022
Initial revision.

Officiële bron: Pilz PSIRT