Siemens Software Security Alert: Update Now or Risk Code Chaos!
CISA will stop updating ICS security advisories for Siemens’ product vulnerabilities after the initial notice. For current updates, check Siemens’ ProductCERT Security Advisories.
Hot Take:
Looks like Siemens’ TIA Portal and SIMATIC STEP 7 are in the hot seat, and CISA is passing the ball back to Siemens for future updates. It’s like a relay race, but with vulnerabilities. Better update that software before your automation starts acting like a rebellious teenager!
Key Points:
- Siemens’ TIA Portal and SIMATIC STEP 7 have a deserialization vulnerability.
- CISA will no longer update ICS security advisories for these products.
- Vulnerability could allow attackers to execute arbitrary code.
- Siemens suggests updating to V18 Update 2 or later versions.
- Mitigation includes securing network access and avoiding untrusted devices.
Already a member? Log in here