Siemens Published Two Out-of-Zone Advisories – 7-22-24

Yesterday, Siemens published two unusual out-of-zone cybersecurity advisories. The first describes vulnerabilities in multiple SICAM products. The second is an update for their Radius Protocol advisory.

SICAM Advisory - This advisory describes two vulnerabilities in three SICAM products.

NOTE: I suspect that we will see a similar advisory from CISA either later today or on Thursday.

Radius Update - This update provides additional information on their RADIUS Protocol advisory that was originally published on July 9^th, 2024.

NOTE: CISA no longer publishes updates for their advisories (ICSA-24-193-05 in this case) covering Siemens products.

 

For more details about these two advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/siemens-published-two-out-of-zone - subscription required.