Siemens Security Snafu: Update Now or Brace for Impact!
CISA will no longer update ICS security advisories for Siemens product vulnerabilities. For current details, consult Siemens’ ProductCERT Security Advisories.
Key Points:
- CISA will stop updating ICS security advisories for Siemens products after the initial advisory.
- Vulnerability in Siemens’ Industrial Edge Management products gets a perfect 10 on the CVSS scale.
- Unauthenticated remote attackers could impersonate devices, making this a high-risk issue.
- Affected Siemens products include versions of Industrial Edge Management Pro and Virtual.
- Mitigations include updating to later versions and following Siemens’ security guidelines.
Already a member? Log in here