Siemens, Schneider Electric, and several other industrial technology vendors have published new security advisories describing vulnerabilities that could expose affected systems to serious attacks.
Siemens has published nine new advisories covering 10 vulnerabilities. Two advisories describe the impact of the recent Node2Shell vulnerability on the company’s products. Exploitation attempts of Node2Shell have been spotted, but there is no indication of attacks specifically targeting Siemens products.
Siemens has also published advisories informing customers about high-severity vulnerabilities in ROS#, Simcenter Femap, Mendix Studio Pro MCP Server, Simatic SCADA and PCS 7, Meta-iot2050, and Simatic WinCC Graphics Designer. A low-severity issue has been addressed in the Fortigate NGFW used by Ruggedcom APE1808 devices.
The flaws can be exploited to inject code, execute arbitrary code, access unauthorized data, and compromise the system.
Siemens says patches are not yet available for several affected products, and some versions will not receive fixes. Customers are advised to apply the recommended mitigations.
Schneider Electric has published only one advisory informing customers about a medium-severity issue in EcoStruxure Power Build Rapsody that could be exploited for arbitrary code execution by processing malicious files.
Germany’s VDE CERT published eight new advisories this week. They cover vulnerabilities found in Beckhoff, MB Connect Line, Helmholz, Weidmueller, Bender, and Ads-Tec products. Several of the security holes involve third-party components, including PHP (PHP2Shell).
In the days leading up to Patch Tuesday, Phoenix Contact also published advisories describing the impact of the PHP2Shell vulnerabilities. The company also released advisories for several vulnerabilities affecting PLCnext and other products.
Johnson Controls also published a couple of advisories earlier this month. One addresses three EasyIO Neo IO Manager vulnerabilities, including one that can allow privilege escalation and arbitrary code execution.
The second describes an issue in the C•CURE 9000 3.20 / Victor 8.0 installer that could allow an attacker to obtain admin credentials and authentication secrets.
Hitachi Energy has confirmed that at least one of its products is affected by the PHP2Shell vulnerabilities.
Related: ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Related: Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD
