Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:35.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2023-048

Pilz: Multiple products prone to libwebp vulnerability

Pilz — PASvisu

Pilz PSIRThoog

Gepubliceerd

5 december 2023

Laatste update

22 mei 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

Several Pilz products use the 3rd-party component 'libwebp' for decoding of images in WebP format. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software product. Depending on the affected product, the vulnerabilities can be exploited locally or over the network.

Mitigatiesamenvatting

Install the fixed product version as soon as it is available. Please visit the Pilz eShop(https://www.pilz.com/en-INT/eshop) to check for the fixed version. PASvisu Runtime: Limit network access to legitimate connections by using a firewall or similarmeasures. Restrict administrative access by setting up user authentication properly.

Revisiegeschiedenis (2)
  1. Initiële publicatie — 5 december 2023

    Initial revision.

  2. Update A — 22 mei 2025

    Fix: quotation mark

Officiële bron: Pilz PSIRT