Industrial giants Siemens, Schneider Electric, and Rockwell Automation have published ICS security advisories this Patch Tuesday.
Siemens published 17 new advisories this Patch Tuesday. The company has released patches for some of the vulnerabilities, while for others it has shared mitigations until permanent fixes become available.
The company addressed critical vulnerabilities in some Simatic S7-1500 CPUs, Industrial Edge devices, and the Ruggedcom Crossbow Station Access Controller (SAC). For Simatic CPUs, more than 400 flaws affect the GNU/Linux subsystem.
Siemens addressed high-severity issues in Ruggedcom Crossbow, Simatic IPC, PSS(R)SINCAL, the .NET Client Library for Simatic S7 Webserver API, Industrial Edge App Publisher, Apogee, Desigo, Talon, Ruggedcom APE1808, and Simatic WinCC products.
Medium-severity issues have been patched in Sentron 3NA COM Fuse and Capital Embedded AR Classic.
Siemens also informed customers about a documentation ambiguity affecting Simatic S7 PLCs and related products.
Schneider Electric released two new advisories, each covering one high-severity vulnerability. The first affects Pro-face STW6000 and Harmony STW6 and could allow an attacker to take control of a device by tricking the targeted user into visiting a malicious webpage.