In the latest installment of Patch Tuesday, major industrial technology companies including Siemens and Schneider Electric have issued new security advisories addressing vulnerabilities that could potentially lead to significant cyber threats. These advisories are crucial for maintaining the security and integrity of industrial control systems (ICS).
Siemens Flags Multiple Vulnerabilities
Siemens has released nine advisories detailing ten vulnerabilities. Notably, two advisories focus on the implications of the Node2Shell vulnerability on Siemens products. Although attempts to exploit Node2Shell have been detected, there is no current evidence that Siemens-specific products have been targeted.
The company has also identified high-severity flaws in several of its products, such as ROS#, Simcenter Femap, and Simatic SCADA and PCS 7. These vulnerabilities can be exploited to inject or execute arbitrary code, access unauthorized data, and compromise system integrity. Siemens advises that patches are not available for some affected versions, urging customers to implement recommended mitigations.
Schneider Electric and Other Vendors
Schneider Electric has issued an advisory for a medium-severity vulnerability in its EcoStruxure Power Build Rapsody software. This flaw could allow arbitrary code execution through the processing of malicious files. Customers are urged to follow the provided security guidance to mitigate potential risks.
Germany’s VDE CERT has disclosed eight advisories, impacting products from Beckhoff, MB Connect Line, and others. Vulnerabilities include issues with third-party components such as PHP, known as PHP2Shell, posing significant security threats.
Additional Advisories from Various Firms
Phoenix Contact has also addressed vulnerabilities related to PHP2Shell, affecting PLCnext and other products. Meanwhile, Johnson Controls released advisories about EasyIO Neo IO Manager vulnerabilities, which could lead to privilege escalation and code execution.
Hitachi Energy has confirmed the presence of PHP2Shell vulnerabilities in at least one of its products, highlighting the widespread impact of these security issues across the industry.
This wave of advisories underscores the importance of vigilance and proactive measures in cybersecurity for industrial systems. As these vulnerabilities emerge, prompt attention and action are imperative to safeguard against potential attacks.
