House › ICS/OT

ICS Patch Tuesday: Siemens Addresses Essential Vulnerabilities

By Eduard Kovacs on November 08, 2022

Tweet

Siemens and Schneider Electrical have launched their Patch Tuesday advisories for November 2022. Siemens has launched 9 new safety advisories overlaying a complete of 30 vulnerabilities, however Schneider has solely revealed one new advisory.

Of Siemens’ 9 advisories, three describe vulnerabilities which have been rated ‘important’. 4 vulnerabilities — one high-severity and three important flaws — have been present in Sicam Q100 energy meter gadgets. They’ll enable an attacker to hijack person classes, crash the machine, or execute arbitrary code.

Scalance W1750D gadgets have greater than a dozen vulnerabilities — together with many rated ‘important’ — that would enable an attacker to execute arbitrary code or trigger a denial-of-service (DoS) situation. Patches should not obtainable, however the vendor has offered some mitigations. The corporate identified that the entry level is a brand-labeled machine made by Aruba Networks, which introduced the supply of patches in late September.

The final Siemens advisory addressing a important vulnerability describes a weak key safety problem in Sinumerik merchandise. This problem was addressed final month in Simatic merchandise, when the seller mentioned it couldn’t rule out malicious exploitation sooner or later.

Study extra about vulnerabilities in industrial merchandise at

SecurityWeek’s ICS Cyber Safety Convention

Excessive-severity vulnerabilities have been patched in Teamcenter Visualization and JT2Go merchandise (DoS and distant code execution), Parasolid (distant code execution), and QMS Automotive (credentials publicity).

Medium-severity flaws have been present in Ruggedcom ROS gadgets, industrial controllers, and the Sinec community administration system.

As well as, between this and the earlier Patch Tuesday, Siemens revealed an advisory describing a important authentication bypass vulnerability affecting Siveillance Video cell servers.

Schneider Electrical has solely revealed one new advisory. It covers three vulnerabilities that expose its NetBotz safety and environmental displays to cross-site scripting (XSS), account takeover, and clickjacking assaults. The French industrial large has launched patches.

Associated: ICS Patch Tuesday: Siemens, Schneider Electrical Launch 19 New Safety Advisories

Associated: ICS Patch Tuesday: Siemens, Schneider Electrical Repair Excessive-Severity Vulnerabilities

Associated: ICS Patch Tuesday: Siemens, Schneider Electrical Repair Solely 11 Vulnerabilities

Get the Every day Briefing

• Most Latest
• Most Learn

• Microsoft Scrambles to Thwart New Zero-Day Assaults
• Wib Launches API Safety Platform After Elevating $16 Million
• ICS Patch Tuesday: Siemens Addresses Essential Vulnerabilities
• Canadian Meat Large Maple Leaf Meals Disrupted by Cyberattack
• Google Patches Excessive-Severity Privilege Escalation Vulnerabilities in Android
• US States Announce $16M Settlement With Experian, T-Cellular Over Information Breaches
• Ransomware Gang Threatens to Publish Medibank Buyer Data
• US Seizes $3.four Billion in Bitcoin Stolen From Silk Highway
• Microsoft: China Flaw Disclosure Legislation A part of Zero-Day Exploit Surge
• Darwinium Raises $10 Million for Buyer Safety Platform

On the lookout for Malware in All of the Improper Locations?

First Step For The Web’s subsequent 25 years: Including Safety to the DNS

Tattle Story: What Your Laptop Says About You

Be in a Place to Act By way of Cyber Situational Consciousness

Report Reveals Closely Regulated Industries Letting Social Networking Apps Run Rampant

2010, A Nice Yr To Be a Scammer.

Do not Let DNS be Your Single Level of Failure

How one can Establish Malware in a Blink

Defining and Debating Cyber Warfare

The 5 A’s that Make Cybercrime so Engaging

How one can Defend In opposition to DDoS Assaults

Safety Budgets Not in Line with Threats

Anycast – Three Causes Why Your DNS Community Ought to Use It

The Evolution of the Prolonged Enterprise: Safety Methods for Ahead Considering Organizations

Utilizing DNS Throughout the Prolonged Enterprise: It’s Dangerous Enterprise

Orbit Brain

http://orbitbrain.com/

Orbit Brain is the senior science writer and technology expert. Our aim provides the best information about technology and web development designing SEO graphics designing video animation tutorials and how to use software easy ways
and much more. Like Best Service Latest Technology, Information Technology, Personal Tech Blogs, Technology Blog Topics, Technology Blogs For Students, Futurism Blog.