CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 01:04.
Filters
1 actief1 advisories gevonden
VDE-2024-054
Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities
Gepubliceerd
21 oktober 2024
Laatste update
22 mei 2025
Getroffen sectoren
Risk evaluation
Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.
Mitigatiesamenvatting
If an immediate firmware update is not possible, the only way to prevent an attack is to prevent the access of the Web Based Management tool from the internet. This can be achieved by using a network element, such as a router, which hides and secures the components from the internet.
Revisiegeschiedenis (3)
Initiële publicatie — 21 oktober 2024
Initial revision.
Update A — 6 november 2024
Fix: correct certvde domain, added self-reference
Update B — 22 mei 2025
Fix: version space, quotation mark