ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

https://www.securityweek.com/wp-content/uploads/2023/11/ICS_Patches.jpg

Industrial giants Siemens, Schneider Electric, and Rockwell Automation have published ICS security advisories this Patch Tuesday.

Siemens published 17 new advisories this Patch Tuesday. The company has released patches for some of the vulnerabilities, while for others it has shared mitigations until permanent fixes become available.

The company addressed critical vulnerabilities in some Simatic S7-1500 CPUs, Industrial Edge devices, and the Ruggedcom Crossbow Station Access Controller (SAC). For Simatic CPUs, more than 400 flaws affect the GNU/Linux subsystem.

Siemens addressed high-severity issues in Ruggedcom Crossbow, Simatic IPC, PSS(R)SINCAL, the .NET Client Library for Simatic S7 Webserver API, Industrial Edge App Publisher, Apogee, Desigo, Talon, Ruggedcom APE1808, and Simatic WinCC products.

Medium-severity issues have been patched in Sentron 3NA COM Fuse and Capital Embedded AR Classic.

Siemens also informed customers about a documentation ambiguity affecting Simatic S7 PLCs and related products.

Advertisement. Scroll to continue reading.

Schneider Electricreleased two new...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

Read more