Siemens, Schneider, Phoenix Contact Patch ICS Vulnerabilities
TL;DR. Major industrial vendors Siemens, Schneider Electric, and Phoenix Contact issued advisories addressing vulnerabilities in their Industrial Control Systems products. - Siemens fixed 10 issues, including a critical vulnerability allowing remote code execution in IoT2050 devices. - Schneider Electric addressed code execution flaws in NetBotz and authentication issues in PowerChute products. - Phoenix Contact patched multiple vulnerabilities in PLCnext firmware, which could lead to denial-of-service. - CISA also released advisories covering new vulnerabilities in various ICS and OT products.
- Industrial vendors release August 2026 Patch Tuesday advisories for ICS vulnerabilities.
- Siemens fixes critical vulnerabilities in Simatic IoT2050 and Siveillance Video Management Servers.
- Schneider Electric patches code execution and authentication flaws in NetBotz and PowerChute.
- Phoenix Contact addresses vulnerabilities in PLCnext firmware allowing DoS and SQL injection.
- CISA issues multiple advisories for vulnerabilities in Pulsetto, Mira, and Johnson Controls products.