ics_ot

  1. Siemens SSA-712929 and CVE-2022-0778: OpenSSL DoS in Industrial Devices

    Siemens’ sprawling product portfolio remains at the center of a major, ongoing industrial‑security effort after a broad advisory—originally published by Siemens ProductCERT and republished by U.S. cyber authorities—relisted scores of SCALANCE, RUGGEDCOM, SIMATIC, SIMOTION, SIPLUS and related...
  2. Mitigating CodeMeter Privilege Escalation in Siemens Desigo CC & SENTRON

    Siemens’ published advisory on the Desigo CC product family and SENTRON powermanager centers on a privilege-escalation flaw in the bundled WIBU CodeMeter runtime that can let a local, unprivileged user elevate rights immediately after installation — a condition Siemens and Wibu have patched but...