Review – 12 Updates Published – 7-14-22

Yesterday, CISA’s NCCIC-ICS published updates for twelve control system security advisories for products from Siemens. Siemens published four additional updates on Tuesday that were not covered by NCCIC-ICS. I will address those this weekend.

Industrial Products Update #1 - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

Industrial Products Update #2 - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

Industrial Products Update #3 - This update provides additional information on an advisory that was originally published on May 12^th, 2022.

Industrial Products Update #4 - This update provides additional information on an advisory that was originally published on August 10^th, 2021 and most recently updated on March 10^th, 2022.

SIMATIC Update #1 - This update provides additional information on an advisory that was originally published on November 11^th, 2021 and most recently updated on April 14^th, 2022.

SIMATIC Update #2 - This update provides additional information on an advisory that was originally published on February 10^th, 2022 and most recently updated on March 10^th, 2022.

OpenSSL Update - This update provides additional information on an advisory that was originally published on June 16^th, 2022.

Mendix Update - This update provides additional information on an advisory that was originally published on April 14^th, 2022 and most recently updated on June 16^th, 2022.

PROFINET Update - This update provides additional information on an advisory that was originally published on April 14^th, 2022 and most recently updated on June 16^th, 2022.

VxWorks Update - This update provides additional information on an advisory that was originally published on July 13^th, 2021 and most recently updated on May 12^th, 2022.

TIA Update - This update provides additional information on an advisory that was originally published on April 14^th, 2022.

SCALANCE Update - This update provides additional information on an advisory that was originally published on March 26^th, 2019 and most recently updated on October 14^th, 2021.

 

For more information on these updates, including brief summary of changes, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/12-updates-published-7-14-22 - subscription required.