Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:35.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2024-053

Lenze: Install Directory with insufficient permissions

Lenze — EASY UI Designer

Lenze PSIRThoog

Gepubliceerd

3 september 2024

Laatste update

13 maart 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

The following tools: * VisiWinNET Smart * VisiWinNET Professional * EASY UI Designer create a directory with insufficient permissions, allowing a low-level user the ability to add and modify certain files that hold SYSTEM privileges, which could lead to privilege escalation.

Mitigatiesamenvatting

Only use this tool in a protected and controlled environment to minimize network impact and to ensure that the tool is inaccessable from outside. In addition, the use of firewalls is recommended to reduce the attack surface, specially to the internet and the internal business network.

Revisiegeschiedenis (3)
  1. Initiële publicatie — 21 augustus 2024

    Initial revision.

  2. Update A — 6 november 2024

    Fix: correct certvde domain, added self-reference

  3. Update B — 13 maart 2025

    Fix: product version

Officiële bron: Lenze PSIRT