CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.
Filters
1 actief1 advisories gevonden
VDE-2025-068
Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions
Gepubliceerd
2 september 2025
Laatste update
20 februari 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
A privilege escalation vulnerability has been identified in Endress+Hauser's Proline 10 devices. This flaw allows an authenticated user with Operator-level access to elevate their privileges and gain Maintenance-level access, potentially enabling unauthorized configuration changes. Endress+Hauser has released a security update addressing this issue.
Mitigatiesamenvatting
If an immediate firmware update is not feasible, it is recommended to disable the device's Bluetooth communication when not actively in use. This significantly reduces the risk of unauthorized access by eliminating the key vector through which the vulnerability could be exploited.
Revisiegeschiedenis (2)
Initiële publicatie — 2 september 2025
Initial version
Update A — 20 februari 2026
fixed typo in alias