Siemens security advisory AV26-802 details control system vulnerabilities
Open source reporting indicates exploitation in the wild; users should apply updates to affected products.
1
Stories per day · 30 days
4 RSS
Relatedics5siemens2adam-36001advantech1advisory1authentication-bypass1canada1geovision1gv-asmanager1hirdb1hitachi1jp11lipschitz1mendix1model-predictive-control1moxa1mrc1neural-approximation1
15 stories, newest first · one card per story
Stories tagged #control-systems
Hitachi HiRDB, JP1 and TRO600 firmware affected by vulnerabilities
The October 27 bulletin lists many HiRDB and JP1 builds plus TRO600 firmware before 9.2.2.1, with no CVEs or exploitation status.
Moxa MRC Client and OnCell LTE devices hit by three flaws
Canada's Cyber Centre says MRC Client through v4.2.0 and all OnCell G3150A-LTE firmware are affected, with fixes not named.
Siemens Mendix SAML module has an authentication-bypass flaw
Mendix 9 builds before V3.6.29 and Mendix 10 and 11 builds before V4.2.4 are affected; Canada urges administrators to apply updates.
Neural approximation can inherit robust MPC safety and stability guarantees
Design conditions treat network error as a bounded disturbance so feasibility and stability hold before deployment.
Advantech ADAM-3600 before v2.8.5.0 affected, Cyber Centre says
Canada's Cyber Centre points administrators to Advantech's advisory and says to apply updates when available.
[Control systems] Schneider Electric security advisory (AV26-1051)
Canada’s Cyber Centre warns of a data-authenticity flaw in Schneider Electric Sage RTU controllers.
[Control Systems] Johnson Controls security advisory (AV26-1010)
Canada's Cyber Centre alerts administrators to a Johnson Controls Illustra Standard vulnerability and urges updates.
[Control systems] GeoVision security advisory (AV26-998)
Canada's Cyber Centre warns GeoVision GV-Eye Android builds before 3.6.0 are vulnerable and urges updates.
[Control systems] Hitachi security advisory (AV26-993)
Canada’s cyber centre says Hitachi Coding Software Suite before version 4.0.0 is vulnerable and should be updated.
[Control systems] CODESYS security advisory (AV26-983)
Canada's Cyber Centre warns of vulnerabilities in multiple CODESYS control products and urges updates.
[Control systems] Advantech security advisory (AV26-937)
Canadian Cyber Centre relays Advantech advisory AV26-937 covering vulnerabilities in EKI-1242EIMS and EKI-1242IEIMS control-system products.
When the World Lies: Backdoor Attacks on Latent World Models for Downstream Control
A poisoned world-model checkpoint hijacks downstream controllers without an explicit trigger rule, passing clean-data evaluation while steering 100% of triggered actions.
[Control Systems] Siemens security advisory (AV26-881)
Siemens patched an account hijacking vulnerability in the Mendix SAML module affecting Mendix 9.24, 10, and 11 releases before fixed versions.
[Control systems] Schneider Electric security advisory (AV26-871)
Canada's Cyber Centre relayed Schneider Electric advisories for vulnerabilities in NetBotz 5-750/755 (5.5.2 and prior) and PowerChute Serial Shutdown (1.5 and prior).