Siemens and other ICS vendors publish new vulnerability advisories
Node2Shell exploitation attempts have been seen, but Siemens reports no attacks aimed at its products.
Stories per day · 30 days
5 RSS
Relatedics3france2irgc2operational-technology2refrigeration2shahid-kaveh2siemens2advisory1armorblock1canada1control-systems1industrial-control1node2shell1ot-security1patch-tuesday1php2shell1rockwell1sage-rtu1
10 stories, newest first · one card per story
Stories tagged #schneider-electric
France blames IRGC unit for grocery refrigeration attacks and fires
A joint French report ties Shahid Kaveh to October sabotage at about 700 stores and moderate disruption at small hydro plants.
[Control systems] Schneider Electric security advisory (AV26-1051)
Canada’s Cyber Centre warns of a data-authenticity flaw in Schneider Electric Sage RTU controllers.
ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.
Schneider Electric Modicon M340 Controller and Communication Modules
CISA warns CVE-2025-6625 lets unauthenticated attackers crash Schneider Electric Modicon M340 controllers and communication modules via a crafted FTP command.
3
Schneider Electric SCADAPack x70 Products
CISA advisory: Schneider Electric SCADAPack x70 RTUs contain CVE-2026-81861, an insufficiently protected credentials flaw allowing unauthorized access to RTU configuration.
1
[Control systems] Schneider Electric security advisory (AV26-912)
Canada's Cyber Centre relays a Schneider Electric advisory covering multiple vulnerabilities in EcoStruxure IT Data Center Expert and PowerLogic T300, urging users to apply updates.
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws
September ICS Patch Tuesday brings critical fixes from Schneider Electric, Siemens, and Aveva, including CVSS 9.2 authentication flaw CVE-2026-3869 in Modicon M580 controllers.
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)
CISA updated ICSA-26-169-07: CVE-2026-4827 (CVSS 8.3) insufficient entropy enables session hijacking across dozens of Schneider Electric grid products; fixes available.
[Control systems] Schneider Electric security advisory (AV26-871)
Canada's Cyber Centre relayed Schneider Electric advisories for vulnerabilities in NetBotz 5-750/755 (5.5.2 and prior) and PowerChute Serial Shutdown (1.5 and prior).