Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 04:38.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2025-048

WAGO: Escalation of Privileges in Coupler Firmware

WAGO — 750 Fieldbus Coupler

WAGO PSIRThoog

Gepubliceerd

8 september 2025

Laatste update

8 september 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

A design flaw in the file system management exposes internal system partitions - intended to be hidden - during brief moments when they are mounted by the firmware. These partitions contain sensitive data such as firmware and certificates. Although access to the file system is mediated by a Nucleus layer that supports permission control, these permissions are currently not enforced. As a result, services like FTP/SFTP may inadvertently gain access to critical internal resources, increasing the risk of unauthorized access or data leakage.

Mitigatiesamenvatting

Update to Firmware version 13.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 8 september 2025

    initial version

Officiële bron: WAGO PSIRT