ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.
Siemens, Schneider Electric, and Rockwell Automation published industrial-control advisories on Patch Tuesday. Siemens issued 17 advisories, including critical flaws in some Simatic S7-1500 CPUs—more than 400 affecting the GNU/Linux subsystem—plus Industrial Edge and Ruggedcom Crossbow, with patches or mitigations. Rockwell's critical 1732E ArmorBlock flaw lets an unauthenticated attacker change the web-server password and take over the admin account; a second issue can cause denial of service. Schneider fixed two high-severity flaws, while ABB said it is not aware of exploitation of a dynovaPRO credential-reset bypass despite 26 password-change events affecting nine customers.
- Siemens published 17 advisories, including critical Simatic, Industrial Edge, and Ruggedcom flaws.
- More than 400 GNU/Linux-subsystem flaws affect some Simatic S7-1500 CPUs.
- Rockwell's critical ArmorBlock flaw lets unauthenticated attackers change the web password.
- Schneider fixed two high-severity issues; ABB saw no confirmed exploitation.
From the original article
2 min read at securityweek.com
ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.