SIEMENS issued 17 industrial-control-system security advisories, releasing fixes for some vulnerabilities and mitigations for others while permanent updates are pending. The issues span products including Simatic S7-1500 CPUs, Industrial Edge devices and Ruggedcom Crossbow Station Access Controllers; Siemens said more than 400 flaws affect the GNU/Linux subsystem in the Simatic CPUs.
Its advisories also cover high-severity vulnerabilities in several Ruggedcom, Simatic, Industrial Edge and building-management products, as well as medium-severity issues in Sentron 3NA COM Fuse and Capital Embedded AR Classic. The company also flagged ambiguous documentation affecting Simatic S7 PLCs and related products.
Schneider Electric published two advisories, each for a high-severity flaw. One affects Pro-face STW6000 and Harmony STW6 devices: an attacker could take control by persuading a user to visit a malicious webpage. The other concerns Sage RTUs, where a privileged user could install malicious firmware. Rockwell Automation disclosed two flaws in 1732E ArmorBlock.
Its critical vulnerability could let an unauthenticated attacker change the device’s web-server password and take over an administrator account; the other is a denial-of-service issue. The article does not give affected versions or specific patch instructions.
Other new notices from CISA and CERT@VDE cover vulnerabilities in Swann cameras, Inductive Automation Ignition and Bender’s Customer&Partner platform. Separately, ABB said it had no evidence of in-the-wild exploitation of a dynovaPRO credential-reset flaw, but internal logs showed 26 password-change events affecting nine customers, which it said might indicate testing or reconnaissance. The article advises organisations to monitor CISA and CERT@VDE advisories.