Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:35.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2026-077

Lenze: Incorrect signature validation in the enable SSH routine

Lenze — c4x0

Lenze PSIRThoog

Gepubliceerd

27 juli 2026

Laatste update

27 juli 2026

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which could allow unauthorized access to the device.

Mitigatiesamenvatting

To resolve this security vulnerability, we recommend installing a firmware update. | Product | Firmware | Fixed Version | | --------------- | -------- | ------------- | | Controller c430 | c4xx | 1.15.2 | | c520 | c5xx | 1.15.2 | | c550 | c5xx | 1.15.2 | | i950 GenA | i950 | 1.15.0 | | i950 GenB | i950 | 2.0.3 |

Revisiegeschiedenis (1)
  1. Initiële publicatie — 27 juli 2026

    Initial release.

Officiële bron: Lenze PSIRT