Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:35.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2024-012

ifm: Vulnerabilities in ifm AC14 firmware

ifm — Smart PLC

ifm PSIRTkritiek

Gepubliceerd

9 juli 2024

Laatste update

15 januari 2026

Getroffen sectoren

Risk evaluation

In ifm Smart PLC firmware up to version 4.3.17 for Smart PLC controllers AC14xx and AC4xxS, an attacker can access the configuration by using the hardcoded credentials. The endpoint hosts a scripts capable of executing various commands.

Mitigatiesamenvatting

When using automation components, make sure that no unauthorized access can take place. Addition measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups.

Revisiegeschiedenis (4)
  1. Initiële publicatie — 9 juli 2024

    Initial revision.

  2. Update A — 27 augustus 2025

    Update: CWE from CVE-2024-28751, Revision History

  3. Update B — 6 januari 2026

    Fixed Version range, Added Score to Vulnerability CVE-2024-28750, deleted "firmware" from the full product name of the hardware, changed Vulnerability title to CVE description

  4. Update C — 15 januari 2026

    Update Product information

Officiële bron: ifm PSIRT