ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

https://www.securityweek.com/wp-content/uploads/2023/11/ICS_Patches.jpg

Industrial giants Siemens, Schneider Electric, and Phoenix Contact have published August 2026 Patch Tuesday advisories to inform customers about vulnerabilities found in their ICS products.

Siemens has published 10 new advisories. One covers a maximum-severity missing-authentication vulnerability in Simatic IoT2050 Advanced devices. A remote, unauthenticated attacker can exploit it to execute arbitrary code on the underlying server with elevated privileges.

A critical code execution vulnerability has also been fixed by Siemens in the Siveillance Video Management Servers.

High-severity flaws have been addressed in Solid Edge, Simcenter Nastran, Siemens License Server, Simcenter Femap, Parasolid, and Logo! Soft Comfort. They can be exploited to crash applications, execute arbitrary code, elevate privileges, read arbitrary files, or obtain sensitive information.

Medium-severity issues have been resolved in Ruggedcom devices and Desigo controllers.

Schneider Electric has published two new advisories describing vulnerabilities in NetBotz 5 and PowerChute Serial Shutdown products.

In NetBotz, the company fixed...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

Read more