ICS Patch Tuesday: Fixes Announced by Siemens, Schneider, Rockwell, ABB, Phoenix Contact

The October 2025 Patch Tuesday saw advisories from Siemens, Schneider Electric, Rockwell Automation, ABB, Phoenix Contact, and Moxa, with over 20 advisories published by these industrial giants.

Siemens published six new advisories, including two critical flaws: a vulnerability in TeleControl Server Basic that could let an unauthenticated, remote attacker obtain user password hashes and log in to perform unauthorized operations, and an authentication issue in Simatic ET 200SP communication processors enabling access to configuration data.

Rockwell Automation issued seven new advisories, one of which is rated critical and covers three flaws in the 1783-NATR configurable NAT router, including DoS, admin account takeovers and NAT rule modification, with additional advisories addressing FactoryTalk Linx, FactoryTalk View Machine Edition, PanelView Plus 7, and DoS in FactoryTalk ViewPoint.

Schneider Electric released one high-severity advisory for EcoStruxure OPC UA Server Expert that can be exploited to cause a DoS, while Phoenix Contact disclosed advisories covering QUINT4 UPS devices and CHARX SEC-3xxx charging controllers, and ABB published a Patch Tuesday advisory plus earlier notes on other vulnerabilities.

The cybersecurity agency CISA has issued its own advisory on the Rockwell 1715 EtherNet/IP vulnerabilities, and Moxa released two advisories about TRC-2190 series products, including hardcoded SSH keys and encryption issues. 15 October 2025.