ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure
Siemens, Schneider Electric, and several other industrial technology vendors have published new security advisories describing vulnerabilities that could expose affected systems to serious attacks.
Siemens has published nine new advisories covering 10 vulnerabilities. Two advisories describe the impact of the recent Node2Shell vulnerability on the company’s products. Exploitation attempts of Node2Shell have been spotted, but there is no indication of attacks specifically targeting Siemens products.
Siemens has also published advisories informing customers about high-severity vulnerabilities in ROS#, Simcenter Femap, Mendix Studio Pro MCP Server, Simatic SCADA and PCS 7, Meta-iot2050, and Simatic WinCC Graphics Designer. A low-severity issue has been addressed in the Fortigate NGFW used by Ruggedcom APE1808 devices.
The flaws can be exploited to inject code, execute arbitrary code, access unauthorized data, and compromise the system.
Siemens says patches are not yet available for several affected products, and some versions will not receive fixes. Customers are advised to...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE