CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.

Filters

1 actief

Reset filters

Zoeken: VDE-2024-004

Zoeken

Leverancier

Protocol

Sector

Ernst

Bron

1 advisories gevonden

VDE-2024-004

TRUMPF: Multiple products affected by log4net vulnerability

TRUMPF — TruTops Boost

TRUMPF PSIRTkritiek

Gepubliceerd

22 april 2025

Laatste update

22 mei 2025

Gekoppelde CVE's

CVE-2018-1285

Getroffen sectoren

Risk evaluation

The versions of TRUMPF products stated below are including a version of log4net that's prone to XXE (External XML Entities) attacks under certain circumstances. This means, the log4net code can be tricked into loading externally hosted, potentially malicious XML code and possibly executing it. This vulnerability allows for the execution of remote XML code, possibly resulting in unauthorized (remote) access to, change of data or disruption of the whole system running the vulnerable application.

Mitigatiesamenvatting

New versions are available for the affected products. Install new versions as provided by TRUMPF SE + Co. KG. To aquire these versions please contact your TRUMPF Service with the PR number 500879.

Revisiegeschiedenis (2)

Initiële publicatie — 22 april 2025
Initial version
Update A — 22 mei 2025
Fix: added distribution, quotation mark

Officiële bron: TRUMPF PSIRT