CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.
Filters
1 actief1 advisories gevonden
VDE-2024-017
Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities
Gepubliceerd
10 april 2024
Laatste update
18 mei 2026
Getroffen sectoren
Risk evaluation
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
Mitigatiesamenvatting
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.
Revisiegeschiedenis (3)
Initiële publicatie — 10 april 2024
Initial revision.
Update A — 22 mei 2025
Fix: quotation mark
Update B — 18 mei 2026
added score to vulnerability, Added CPEs, added last affected products to vulnerabilities