Review – Siemens Publishes 2 Out-of-zone Advisories – 10-10-24

Yesterday Siemens, after publishing 13 advisories and updating 18 more on Tuesday, published an additional new advisory and updated another. For a couple of years now Siemens has been consolidating the publication of their advisories and updates on Cyber Tuesday each month. While not totally unknown, these out-of-zone vulnerability communications are unusual enough that they deserve special attention.

Advisories

Siveillance Video Camera Drivers Advisory - This new advisory that discusses a classic buffer overflow vulnerability in their Siveillance Video Device Pack.

Updates

Mendix Runtime Update - This update provides additional information on an advisory that was originally published on September 10^th, 2024, and most recently updated on October 10^th, 2024.

 

For more information on these advisories, including some commentary about what is apparently going on, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/siemens-publishes-2-out-of-zone-advisories - subscription required.