ICS Patch Tuesday: Rockwell Automation Leads With 8 Security Advisories

ICS Patch Tuesday saw Rockwell Automation lead with eight new advisories, all of them high-severity and covering vulnerabilities in recent product releases.

Rockwell fixed issues including a sensitive data exposure in FactoryTalk Analytics LogixAI, DoS and code execution flaws in ControlLogix controllers, a remote code execution vulnerability in Stratix (Cisco) devices, memory corruption in 1783-NATR, an SSRF flaw in Automation ThinManager, a remote code execution flaw in FactoryTalk Optix, and a data exposure in FactoryTalk Activation Manager.

Siemens published seven advisories, with one carrying a CVSS score of 9.3 affecting Simatic Virtualization as a Service that could allow access to or alteration of sensitive data, plus another high-severity issue in Siemens’ User Management Component enabling unauthenticated remote code execution or DoS. Schneider Electric issued two advisories, covering OS command injection in Saitel DR & Saitel DP RTU products and an XSS flaw in Altivar.

Phoenix Contact also published two advisories, one for Jq JSON processor vulnerabilities in FL Mguard and another for a CodeMeter Runtime-related flaw, while CISA has nine new and five updated advisories, with the majority addressing Rockwell Automation product vulnerabilities, according to CISA.