ICS Patch Tuesday: Vulnerabilities Addressed by Schneider Electric, Siemens

ICS Patch Tuesday: Vulnerabilities Addressed by Schneider Electric, Siemens
Summary: Industrial giants Schneider Electric and Siemens have issued their February 2025 Patch Tuesday ICS security advisories, addressing numerous vulnerabilities across various products. Siemens has reported 14 advisories encompassing approximately 100 vulnerabilities, primarily affecting third-party components, while Schneider Electric has detailed four advisories with a total of nine vulnerabilities. Key issues include critical flaws in the Tableau Server component and high-severity vulnerabilities in ASCO Remote Annunciator products that could disrupt operations and compromise sensitive information.

Affected: Siemens, Schneider Electric, Fortinet

Keypoints :

  • Siemens has issued 14 advisories, addressing around 100 vulnerabilities, including critical flaws in Opcenter Intelligence.
  • Schneider Electric has reported four advisories related to nine vulnerabilities, including high-severity flaws in ASCO Remote Annunciator products.
  • Both companies are in the process of releasing patches, with forthcoming Fortinet FortiOS patches for affected Siemens devices.

Source: https://www.securityweek.com/ics-patch-tuesday-vulnerabilities-addressed-by-schneider-electric-siemens/