Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 6 november 2026 om 23:32.

Filters

1 actief
Reset filters

1 advisories gevonden

vde-2025-056

Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

Phoenix Contact — Catan C1

Phoenix Contact PSIRTkritiek

Gepubliceerd

12 augustus 2026

Laatste update

12 augustus 2026

Getroffen sectoren

Risk evaluation

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.

Mitigatiesamenvatting

Update to PLCnext firmware version 2026.0.3 or later which fixes this vulnerability. Check regularly for firmware updates and apply them as soon as they are available for the specific device.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 12 augustus 2026

    Initial

Officiële bron: Phoenix Contact PSIRT