Siemens and other vendors issue industrial control advisories

Siemens, Schneider Electric and other industrial technology vendors issued new security advisories for vulnerabilities exposing affected systems to serious attacks, SecurityWeek reported.

Nine advisories issued by Siemens cover 10 vulnerabilities, and two address Node2Shell impact on its products, according to SecurityWeek. Exploitation attempts targeting Node2Shell have been observed, though nothing indicates Siemens products are the specific target.

SecurityWeek reported that the Siemens list includes ROS#, Simcenter Femap, Mendix Studio Pro MCP Server, Simatic SCADA and PCS 7, Meta-iot2050, and Simatic WinCC Graphics Designer, all carrying high-severity vulnerabilities. These flaws permit code injection, arbitrary code execution, unauthorized data access, and system compromise.

Fixes are missing for affected Siemens products, the company said, and certain versions will never receive patches. The company told customers to apply the recommended mitigations.

The Fortigate NGFW used by Ruggedcom APE1808 devices has had a low-severity flaw addressed, SecurityWeek reported. Schneider Electric released one advisory on a medium-severity issue in EcoStruxure Power Build Rapsody, where malicious file processing allows arbitrary code execution.

Germany’s VDE CERT issued eight advisories this week on vulnerabilities in Beckhoff, MB Connect Line, Helmholz, Weidmueller, Bender, and Ads-Tec products. Some of the VDE CERT advisories involve third-party components such as PHP2Shell.

Phoenix Contact issued advisories ahead of Patch Tuesday on PHP2Shell impact and on vulnerabilities covering PLCnext and other products. Hitachi Energy confirmed that PHP2Shell vulnerabilities affect at least one of its products.

Earlier this month, Johnson Controls published advisories on three EasyIO Neo IO Manager flaws, including one that permits privilege escalation and arbitrary code execution. Another Johnson Controls advisory covers an installer issue in C•CURE 9000 3.20 / Victor 8.0 that could expose admin credentials and authentication secrets.