Siemens Publishes Out-of-Zone Advisory for 3rd Party Vulnerability

Yesterday Siemens published an out-of-zone (1 day after their monthly tranche) advisory for a third-party (Mendix). The advisory describes a privilege escalation vulnerability in the Mendix Application. Siemens reports that Mendix has updated versions available to mitigate the vulnerability.