Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:02.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2025-080

WAGO: Multiple Vulnerabilities in I/O-Check Service

WAGO — CC100

WAGO PSIRTkritiek

Gepubliceerd

9 september 2025

Laatste update

9 september 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

A missing authentication vulnerability exists in the iocheckd service "I/O-Check" functionality. A single packet can cause a denial of service and weaken credentials resulting in the default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.

Mitigatiesamenvatting

The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 9 september 2025

    Initial revision.

Officiële bron: WAGO PSIRT