Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 6 november 2026 om 23:32.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2026-121

Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software

Phoenix Contact — PLCnext Engineer

Phoenix Contact PSIRThoog

Gepubliceerd

4 november 2026

Laatste update

4 november 2026

Getroffen sectoren

Risk evaluation

GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities have been identified in PLCnext Engineer prior to version 2026.6. The effects of these vulnerabilities may result in a complete loss of confidentiality, integrity and availability.

Mitigatiesamenvatting

Phoenix Contact strongly recommends to upgrade to PLCnext Engineer 2026.6 which fixes these vulnerabilities.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 14 oktober 2026

    Initial revision.

Officiële bron: Phoenix Contact PSIRT