Review – 13 Updates Published – 10-14-21

Yesterday CISA’s NCCIC-ICS published 13 updates for control system security advisories for products from Siemens. Siemens published an additional three updates on Tuesday that I will discuss this weekend.

PROFINET Update #1 - This update provides additional information on an advisory that was originally published on May 9th, 2017 and most recently updated on June 8^th, 2021.

Industrial Products Update #1 - This update provides additional information on an advisory that was originally published on December 5^th, 2017 and most recently updated on June 8^th, 2021.

SCALANCE Update #1 - This update provides additional information on an advisory that was originally published on March 26^th, 2019 and most recently updated on January 14^th, 2020.

PROFINET Update #2 - This update provides additional information on an advisory that was originally published on October 10^th, 2019 and most recently updated on June 8^th, 2021.

Industrial Real-Time Update - This update provides additional information on an advisory that was originally published on October 10^th, 2019 and most recently updated on February 9^th, 2021.

PROFINET-IO Update - This update provides additional information on an advisory that was originally published on February 11^th, 2020 and most recently updated on September 14^th, 2021.

SCALANCE Update #2 - This update provides additional information on an advisory that was originally published on May 11^th, 2021 and most recently updated on August 10^th, 2021.

SIMATIC Update - This update provides additional information on an advisory that was originally published on May 11^th, 2021 and most recently updated on September 14^th, 2021.

Linux-based Products Update - This update provides additional information on an advisory that was originally published on May 11^th, 2021 and most recently updated on September 14^th, 2021.

PROFINET Update #2 - This update provides additional information on an advisory that was originally published on July 11^th, 2021 and most recently updated on September 14^th, 2021.

SIPROTEC 5 Update #1 - This update provides additional information on an advisory that was originally published on September 14^th, 2021.

SIPROTEC 5 Update #2 - This update provides additional information on an advisory that was originally published on September 14^th, 2021.

RUGGEDCOM Update - This update provides additional information on an advisory that was originally published on September 16^th, 2021.

For more information on these updates, including list of items changed, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/13-updates-published-10-14-21 - subscription required.