CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 04:38.
Filters
1 actief1 advisories gevonden
VDE-2024-030
MB connect line: mbNET.mini vulnerable to OS command injection
Risk evaluation
There exists a vulnerability in all mbNET.mini devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30 pm In section Reported by Sebastian Dietz (CyberDanube) was added.
Mitigatiesamenvatting
As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.
Revisiegeschiedenis (1)
Initiële publicatie — 3 juli 2024
Initial revision.