Siemens Security Snafu: TeleControl Server Bug May Cause Memory Meltdown!
As of January 2023, CISA is taking a break from updating ICS security advisories for Siemens product vulnerabilities. For the freshest scoop, check Siemens’ ProductCERT Security Advisories. So, if you’re keen on staying in the vulnerability loop, it’s time to bookmark Siemens’ page!
Hot Take:
Siemens’ TeleControl Server Basic might be in for a memory overload party, but CISA is leaving that shindig early, advising everyone to follow Siemens’ own security team for the latest scoop. Looks like CISA’s passing the baton and saying, “Not my circus, not my monkeys!”
Key Points:
- CISA will stop updating Siemens’ ICS security advisories as of January 10, 2023.
- The vulnerability affects Siemens’ TeleControl Server Basic versions prior to V3.1.2.2.
- The flaw allows remote attackers to cause a denial-of-service by exploiting memory allocation.
- Mitigation includes updating to version V3.1.2.2 or later and disabling server redundancy.
- No known public exploitation of this vulnerability has been reported so far.
Already a member? Log in here