CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:32.

Filters

1 actief

Reset filters

Zoeken: VDE-2026-081

Zoeken

Leverancier

Protocol

Sector

Ernst

Bron

1 advisories gevonden

VDE-2026-081

Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmüller — IE-SR

Weidmüller PSIRThoog

Gepubliceerd

28 juli 2026

Laatste update

28 juli 2026

Gekoppelde CVE's

CVE-2026-14167 CVE-2026-14168 CVE-2026-14169 CVE-2026-14171 CVE-2026-2291 CVE-2026-4893 CVE-2026-5172 CVE-2026-40510 CVE-2025-69419

Getroffen sectoren

Risk evaluation

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.

Mitigatiesamenvatting

Restrict access to the configuration interface / web UI to trusted administrators and trusted networks, and do not grant the user/permission-management write permission to non-administrator roles.

Revisiegeschiedenis (1)

Initiële publicatie — 28 juli 2026
Initial version

Officiële bron: Weidmüller PSIRT