Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 6 november 2026 om 23:32.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2026-132

WAGO: Multiple Devices affected by PHP2Shell

WAGO — CC100

WAGO PSIRTkritiek

Gepubliceerd

2 november 2026

Laatste update

4 november 2026

Getroffen sectoren

Risk evaluation

Critical vulnerabilities in the PHP runtime may allow a remote attacker to execute arbitrary code by exploiting weaknesses in PHP's internal memory and request handling mechanisms. Under specific conditions, specially crafted web requests can trigger unexpected behavior that could compromise the affected web server process. WAGO controllers with the integrated web server enabled and running an affected PHP version are exposed to these vulnerabilities.

Mitigatiesamenvatting

Update the device to Firmware Version 4.10.4 (FW32) or later. Until FW32 is available, customers using Firmware Version 4.9.1 (FW31) should install the corresponding IPK security patch, which is available through the WAGO Download Center.

Revisiegeschiedenis (2)
  1. Initiële publicatie — 2 november 2026

    Release version.

  2. Update A — 4 november 2026

    Edited a typo in the product tree.

Officiële bron: WAGO PSIRT