Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:35.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2024-061

ifm: Improper Access Control vulnerability

ifm — Smart PLC

ifm PSIRThoog

Gepubliceerd

30 juni 2025

Laatste update

18 februari 2026

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

A vulnerability has been disclosed in PLC ifm AC4xxS that allows an attacker to trigger the safety state with the help of a specially crafted html request. This leads to a loss of availability.

Mitigatiesamenvatting

When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups. PLC with firmware V6.1.8 http interface can be disabled.

Revisiegeschiedenis (3)
  1. Initiële publicatie — 30 juni 2025

    Initial release.

  2. Update A — 16 februari 2026

    Updated content and product names.

  3. Update B — 18 februari 2026

    Fixed Typo.

Officiële bron: ifm PSIRT