Industrial giants dump more ICS patches

Schneider and Siemens dropped more critical industrial advisories to ruin our week. Why do we even bother pretending factory controllers had proper authentication.

Source: SecurityWeek

The Full Story

Severity: High Mood: Expected

Same story different day for industrial automation, as Schneider Electric and Siemens bless our overburdened teams with advisories tackling critical flaws across OT and ICS gear. Plant operators relying on Modicon M580 controllers got treated to a delightful CVSS 9.2 authentication blunder, alongside nasty bugs in PowerLogic T300 units. Dodging complete industrial catastrophe means dutifully applying advisories across Reyrolle 7SR5 relays, Open Interface Services, and Edge Management before reality bites.

#patchtuesday #icspain

Open article →