Review - Siemens Publishes Out-of-Zone Advisory – 12-16-24

Today, Siemens published a control system security advisory, almost a week after their regularly scheduled, monthly release of security advisories and updates. This is the third out-of-zone publication in that week.

UMC Advisory - This advisory describes a heap-based buffer overflow vulnerability in their User Management Component (UMC) of multiple Siemens products.

 

For more information on this advisory, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/siemens-publishes-out-of-zone-advisory-197 - subscription required.