Major ICS/OT vendors like Siemens, Schneider Electric, Rockwell Automation, ABB, Phoenix Contact, and Moxa have issued security advisories during October 2025 Patch Tuesday. These advisories include critical vulnerabilities such as code execution, DoS attacks, privilege escalation, and data manipulation affecting various industrial control systems and products. #Siemens #RockwellAutomation #ABB #PhoenixContact
Keypoints
- Siemens released advisories for critical flaws in TeleControl Server Basic and Simatic ET 200SP communication processors.
- Several Siemens products, including Siemens SiPass and Solid Edge, were patched for high- and medium-severity vulnerabilities.
- Rockwell Automation addressed critical vulnerabilities in its 1783-NATR router and multiple factory products, including DoS and privilege escalation issues.
- Phoenix Contact disclosed vulnerabilities in QUINT4 UPS devices and CHARX SEC-3xxx charging controllers, allowing DoS and command injections.
- ABB published advisories for vulnerabilities in B&R Automation Runtime, MConfig, and other recent security issues across its product line.