Review - 9 Updates Published – 8-10-21

 

Yesterday CISA’s NCCIC-ICS published nine updates of control system security advisories for products from Siemens.

PKE Update - This update provides additional information on an advisory that was originally published on March 10^th, 2020 and most recently updated on March 20^th, 2021.

SIMATICT Update - This update provides additional information on an advisory that was originally published on November 10^th, 2020.

TCP/IP Stack Update - This update provides additional information on an advisory that was originally published on March 9^th, 2021 and most recently updated on May 11^th, 2021.

SCALANCE Update - This update provides additional information on an advisory that was originally published on May 11^th, 2021.

SINAMICS Update #1 - This update provides additional information on an advisory that was originally published on May 11^th, 2021.

SINAMICS Update #2 - This update provides additional information on an advisory that was originally published on May 11^th, 2021.

Linux-Based Products Update - This update provides additional information on an advisory that was originally published on May 11^th, 2021 and most recently updated on July 13^th, 2021.

Industrial Products Update - This update provides additional information on an advisory that was originally published on July 11^th, 2021.

PROFINET Update - This update provides additional information on an advisory that was originally published on July 11^th, 2021.

Other Siemens Updates - Siemens published three additional updates yesterday. Unless NCCIC-ICS covers them tomorrow, I will address them this weekend.

For more details on these updates, including a description of the changes made - see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/9-updates-published-8-10-21 - subscription required.