Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:02.

Filters

1 actief
Reset filters

1 advisories gevonden

sca-2026-0016

Vulnerabilities Affecting SICK CorivaHub

SICK — Localization systems

SICK PSIRTkritiek

Gepubliceerd

16 oktober 2026

Laatste update

16 oktober 2026

Getroffen sectoren

Risk evaluation

SICK CorivaHub includes the third-party components Apache Tomcat and MapLibre GL, which are affected by two known vulnerabilities. These vulnerabilities include an improper input validation issue in Apache Tomcat and a vulnerability in MapLibre GL that could allow malicious behavior through custom GUIs. Under certain conditions, successful exploitation could affect the confidentiality, integrity and availability of the affected system. The attack surface associated with the Apache Tomcat vulnerability is significantly reduced by the default product configuration. Nevertheless, SICK recommends updating to CorivaHub 2026.1.2 to remediate both vulnerabilities.

Mitigatiesamenvatting

Users are recommended to upgrade to version 2026.1.2.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 16 oktober 2026

    Initial version

Officiële bron: SICK PSIRT