Siemens flags flaws across industrial products and Node2Shell exposure

Siemens has published nine new advisories describing 10 vulnerabilities across its product line, with two advisories detailing the impact of the Node2Shell vulnerability on Siemens’ hardware and software. Exploitation attempts for Node2Shell have been observed, but there is no indication of attacks specifically targeting Siemens products at this time.

In addition, Siemens flagged high‑severity flaws affecting ROS#, Simcenter Femap, Mendix Studio Pro MCP Server, Simatic SCADA and PCS 7, Meta-iot2050, and Simatic WinCC Graphics Designer. A separate, low‑severity issue has been addressed in the Fortigate next‑generation firewall (NGFW) used by Ruggedcom APE1808 devices.

Siemens states that patches are not yet available for several affected products, and some versions may not receive fixes; customers are urged to apply the recommended mitigations issued in the advisories.

The flaws can be exploited to inject or execute arbitrary code and to access unauthorised data, enabling potential system compromise. Siemens notes that while some advisories describe high‑severity risk, patch availability varies by product and version, with mitigations advised where fixes are not yet shipped.

Germany’s VDE CERT published eight advisories this week for products from Beckhoff, MB Connect Line, Helmholtz, Weidmueller, Bender and Ads‑Tec, among others, including vulnerabilities in third‑party components such as PHP (PHP2Shell). Phoenix Contact and Hitachi Energy also issued advisories in the run‑up to Patch Tuesday, highlighting the broader industrial‑technology ecosystem facing this wave of disclosures.