Review – 17 Updates Published – 6-16-22

Yesterday, CISA’s NCCIC-ICS published updates for 17 control system security advisories for products from Siemens. Siemens published an additional 14 updates that were not covered yesterday by NCCIC-ICS, I will cover them this weekend.

BACnet Update - This update provides additional information on an advisory that was originally published on October 12^th, 2017.

TIA Portal Update - This update provides additional information on an advisory that was originally published on January 14^th, 2020 and most recently updated on May 12^th, 2022.

SCALANCE Update - This update provides additional information on an advisory that was originally published on January 14^th, 2020 and most recently updated on February 10^th, 2022.

PROFINET-IO Update - This update provides additional information on an advisory that was originally published on February 11^th, 2020 and most recently updated on April 14^th, 2022.

SIMATIC Update #1 - This update provides additional information on an advisory that was originally published on April 14^th, 2020 and most recently updated on March 9^th, 2021.

SIMATIC Update #2 - This update provides additional information on an advisory that was originally published on August 10^th, 2021.

SIMATIC Update #3 - This update provides additional information on an advisory that was originally published on September 14^th, 2021.

Linux-based Products Update - This update provides additional information on an advisory that was originally published on May 11^th, 2021 and most recently updated on December 16^th, 2021.

Industrial Products Update - This update provides additional information on an advisory that was originally published on July 11^th, 2021 and most recently updated on August 10^th, 2021.

Solid Edge Update - This update provides additional information on an advisory that was originally published on February 10^th, 2022 and most recently updated on April 14^th, 2022.

RUGGEDCOM Update - This update provides additional information on an advisory that was originally published on March 10^th, 2022 and most recently updated on April 14^th, 2022.

Mendix Update - This update provides additional information on an advisory that was originally published on April 14^th, 2022.

PROFINET Update - This update provides additional information on an advisory that was originally published on April 14^th, 2022.

Teamcenter Update - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

Industrial Devices Update - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

Desigo Update - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

SIMATIC WinCC Update - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

 

For additional information on these updates, including a brief description of the changes, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/17-updates-published-6-16-22 - subscription required.