● Covered by 1 source · 1 reportMedium impact1 neutral
ICS Patch Tuesday: Siemens, Rockwell, and Schneider Electric Release Security Advisories
Key points
- Siemens released 17 new ICS security advisories.
- Rockwell Automation fixed critical flaws in 1732E ArmorBlock.
- Schneider Electric addressed two high-severity vulnerabilities.
- CISA and CERT@VDE also published new ICS advisories.
Siemens Addresses Multiple Vulnerabilities
Siemens published 17 new security advisories this Patch Tuesday, releasing patches for some vulnerabilities and providing mitigations for others. Critical vulnerabilities were addressed in Simatic S7-1500 CPUs, Industrial Edge devices, and the Ruggedcom Crossbow Station Access Controller (SAC). More than 400 flaws affecting the GNU/Linux subsystem were found in Simatic CPUs.
High-severity issues were also addressed in products including Ruggedcom Crossbow, Simatic IPC, PSS(R)SINCAL, and Industrial Edge App Publisher. Medium-severity issues were patched in Sentron 3NA COM Fuse and Capital Embedded AR Classic. Siemens also clarified a documentation ambiguity for Simatic S7 PLCs.
Rockwell Automation and Schneider Electric Updates
Rockwell Automation issued one new advisory detailing two vulnerabilities in 1732E ArmorBlock. A critical flaw allows an unauthenticated attacker to change a device’s web server password, potentially leading to an administrator account takeover. The second vulnerability is a denial-of-service issue.
Schneider Electric released two advisories, each covering a high-severity vulnerability. One affects Pro-face STW6000 and Harmony STW6, allowing device control via a malicious webpage. The other impacts Sage RTUs, enabling a privileged user to install malicious firmware.
Additional ICS Advisories
The Cybersecurity and Infrastructure Security Agency (CISA) published two new ICS advisories. One covers vulnerabilities in Swann SWIFI-SE2KIC cameras that expose video information, and the other addresses a privilege escalation issue in Inductive Automation’s Ignition product. Germany’s CERT@VDE also released an advisory regarding an information disclosure vulnerability in Bender’s Customer&Partner platform.
Other Vendor Updates
Between this and the previous Patch Tuesday, other vendors including Moxa, Honeywell, Hitachi Energy, Johnson Controls, and ABB also published security advisories for their industrial control systems and related products.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Industrial control system (ICS) vendors Siemens, Rockwell Automation, and Schneider Electric released security advisories this Patch Tuesday. Siemens issued 17 advisories, Rockwell fixed an ArmorBlock takeover flaw, and Schneider Electric addressed vulnerabilities in Pro-face STW6000 and Sage RTUs. These updates address critical and high-severity vulnerabilities that could lead to device takeover, denial of service, or unauthorized access in industrial environments.