Review – 22 Updates Published – 4-14-22

Yesterday CISA’s NCCIC-ICS published 22 control system security updates for products from Siemens. Siemens published ten additional updates on Tuesday that were not covered by CISA. I will be reporting on them this weekend.

SIMATIC Update #1 - This update provides additional information on an advisory that was originally published on November 22^nd, 2016.

SIMATIC Update #2 - This update provides additional information on an advisory that was originally published on December 10th, 2019 and most recently updated on March 10^th, 2020.

SIMATIC Update #3 - This update provides additional information on an advisory that was originally published on February 11^th, 2020 and most recently updated on January 12^th, 2021.

SIMATIC Update #4 - This update provides additional information on an advisory that was originally published on July 9^th, 2020 and most recently updated on November 11^th, 2021.

SIMATIC Update #5 - This update provides additional information on an advisory that was originally published on June 8^th, 2021.

SIMATIC Update #6 - This update provides additional information on an advisory that was originally published on November 11^th, 2021 and most recently updated on March 10^th, 2022.

SIMATIC Update #7 - This update provides additional information on an advisory that was originally published on February 10^th, 2022.

OPC UA Update - This update provides additional information on an advisory that was originally published on 8-31-17 and most recently updated on August 11^th, 2020.

Industrial Products Update #1 - This update provides additional information on an advisory that was originally published on April 9th, 2019 and most recently updated on March 10^th, 2020.

Industrial Products Update #2 - This update provides additional information on an advisory that was originally published on February 11^th, 2020 and most recently updated on February 10^th, 2022.

Industrial Products Update #3- This update provides additional information on an advisory that was originally published on July 13^th, 2021.

Industrial Products Update #4 - This update provides additional information on an advisory that was originally published on February 10^th, 2022 and most recently updated on March 10^th, 2022.

SCALANCE Update - This update provides additional information on an advisory that was originally published on April 14^th, 2020 and most recently updated on February 10^th, 2022.

SIMOTICS Update - This update provides additional information on an advisory that was originally published on April 14th, 2020 and most recently updated on December 16^th, 2021.

PROFINET Update - This update provides additional information on an advisory that was was originally published on July 11^th, 2021 and most recently updated on October 14^th, 2021.

APOGEE Update - This update provides additional information on an advisory that was was originally published on November 11^th, 2021 and most recently updated on December 16^th, 2021.

COMOS Update - This update provides additional information on an advisory that was originally published on January 13^th, 2022 and most recently updated on February 10^th, 2022.

Solid Edge Update - This update provides additional information on an advisory that was originally published on February 10^th, 2022 and most recently updated on March 10^th, 2022.

Mendix Update - This update provides additional information on an advisory that was originally published on March 10^th, 2022.

RUGGEDCOM Update #1 - This update provides additional information on an advisory that was originally published on March 10^th, 2022.

RUGGEDCOM Update #2 - This update provides additional information on an advisory that was originally published on March 10^th, 2022.

Polarion Update - This update provides additional information on an advisory that was originally published on March 10^th, 2022.

 

For more information on these updates, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/22-updates-published-4-14-22 - subscription required.