Review - Siemens Published Out-of-Zone Advisory – 11-18-19

Yesterday Siemens published an advisory for ten vulnerabilities in their Tecnomatix Plant Simulation product. This comes almost one week after they published 12 advisories and 13 updates on Cyber Tuesday. Looking at the related ZDI advisories, it appears that Siemens published this out-of-zone advisory today as part of a coordinated disclosure agreement with the Zero Day Initiative and the researcher reporting the vulnerabilities.

 

For more details about the advisory, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/siemens-published-out-of-zone-advisory - subscription required.