Science & Tech · Cybersecurity · 2 hrs ago

Siemens, Schneider Electric and Rockwell issue industrial security advisories

Siemens, Schneider Electric and Rockwell issue industrial security advisories

Siemens, Schneider Electric and Rockwell Automation disclosed security flaws in industrial control products on Patch Tuesday.

Siemens issued 17 advisories, with fixes available for some problems and temporary mitigations for others.

Rockwell reported a critical flaw in its 1732E ArmorBlock that could let an unauthenticated attacker change a device’s web server password and take over an administrator account.

A second ArmorBlock flaw could cause a denial of service, which can disrupt a device.

Schneider Electric warned of two high-severity flaws in products used for industrial control, including one that could allow malicious firmware to be installed by a privileged user.

These systems help run industrial operations, so weaknesses can put devices and the information or services they support at risk.

Organizations should apply available fixes and mitigations and monitor advisories from CISA and Germany’s CERT@VDE for further guidance.

1 source

Related

What people are saying

ABBNot stated
Internal log analysis identified 26 password change events affecting 9 customers, which may indicate testing or reconnaissance activity.
via SecurityWeek