CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.
Filters
1 actief1 advisories gevonden
VDE-2025-011
PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure
Gepubliceerd
26 mei 2025
Laatste update
27 augustus 2025
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
A stored cross-site scripting vulnerability has been discovered in the profinet gateway LB8122A.1.EL. An attacker can write an HTML tag with up to 32 characters in the message field of a HART transmitter. The HTML tag is interpreted as HTML when the HART information is displayed in a webbrowser. If the HTML tag contains a link to a manipulated page, a user can be tricked into accessing this page. Furthermore, an attacker can access information about running processes via the SNMP protocol. Sending such SNMP read commands can also trigger a reboot.
Mitigatiesamenvatting
Please install the updated firmware V1.3.13.
Revisiegeschiedenis (2)
Initiële publicatie — 5 juni 2025
Initial revision.
Update A — 27 augustus 2025
Update: CWE from CVE-2025-41654, Revision History