ot security

Siemens' widely deployed use of Wibu-Systems CodeMeter Runtime has again drawn scrutiny after a local privilege-escalation flaw (CVE-2025-47809) was published that can let an unprivileged user gain elevated access immediately after an unprivileged installation when the CodeMeter Control Center...

Siemens has confirmed a widespread denial-of-service (DoS) vulnerability affecting multiple models in the SIPROTEC 4 and SIPROTEC 4 Compact line that can be triggered remotely by an unauthenticated attacker during interrupted file-transfer operations; the issue is tracked as CVE-2024-52504 and...

A recently republished CISA advisory warns that Rockwell Automation’s FactoryTalk Linx contains a serious improper access control flaw that—when triggered by setting Node.js’ process.env.NODE_ENV to "development"—can disable FTSP token validation and allow an attacker to create, update, or...

Rockwell Automation’s Micro800 line of programmable logic controllers (PLCs) has been the subject of a high-severity U.S. Cybersecurity and Infrastructure Security Agency (CISA) advisory republished on August 14, 2025, warning that multiple remotely exploitable vulnerabilities tied to Azure RTOS...

Siemens has disclosed an XML External Entity (XXE) vulnerability in multiple versions of SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER that can be triggered by specially crafted XML files and may allow an attacker to read arbitrary files from a compromised host; the issue has been...

A newly republished CISA advisory warns that Rockwell Automation’s Studio 5000 Logix Designer contains an improper input validation flaw that can be triggered via environment variables, allowing an attacker with local network access to crash the engineering software—and in some cases plausibly...

A high-severity privilege-escalation flaw has been disclosed in Rockwell Automation’s FactoryTalk ViewPoint that allows a local attacker to escalate to SYSTEM privileges by abusing Windows MSI repair behavior; the issue (CVE-2025-7973) carries a CVSS v4 base score of 8.5 and affects FactoryTalk...

Siemens has republished an advisory confirming that several POWER METER models in the SICAM Q100 and Q200 families store SMTP credentials in cleartext — a design flaw that allows an authenticated local user to extract email account passwords from device storage or exported configuration files...

Rockwell Automation’s FLEX 5000 I/O modules have been flagged in a fresh CISA advisory for a remotely exploitable input‑validation flaw that can render analog modules non‑responsive until a manual power cycle; the advisory names two CVEs, assigns a CVSS v4 base score of 8.7, and urges immediate...

Siemens’ advisory covering third‑party components in SINEC OS landed as a stark reminder that industrial network stacks are only as strong as their weakest third‑party link: dozens of kernel and userland weaknesses, CVEs spanning classic buffer overflows to TOCTOU races, and a vendor‑centric...

Siemens’ SIMATIC RTLS Locating Manager — the Windows-based server component that fuses UWB tag data into real-time location feeds — was the subject of a fresh security republishing on August 12–14, 2025 that calls out multiple mid-to-high severity flaws, including two newly tracked CVEs...

Siemens ProductCERT has confirmed a widespread DLL-hijacking flaw in the Siemens Web Installer used by its Online Software Delivery (OSD) mechanism — tracked as CVE‑2025‑30033 — that can allow arbitrary code execution during installation, carries a CVSS v4 base score of 8.5, and affects dozens...

Siemens’ SINEC Traffic Analyzer—an on-premises PROFINET monitoring tool found in utilities, manufacturing, and energy networks—has been the subject of a sustained, multi-stage security disclosure that now spans multiple advisories and several high-severity CVEs. The vendor (Siemens ProductCERT)...

Siemens RUGGEDCOM ROX II devices are the subject of a newly cataloged vulnerability — tracked as CVE-2025-40761 — that allows an attacker with physical access to the device’s serial interface to bypass authentication through the device’s Built-In-Self-Test (BIST) mode and obtain a root shell, a...

Johnson Controls’ iSTAR Ultra family of door controllers contains a cluster of high‑impact vulnerabilities that — if left unpatched — can give remote attackers a path to root access, firmware modification, and local console takeover, creating a direct route from network compromise to physical...

A newly disclosed vulnerability in Delta Electronics’ DIAView industrial automation management system has put critical infrastructure sectors on high alert, as experts warn of the significant risk posed by remotely exploitable path traversal flaws that could allow attackers to access or alter...

A major security vulnerability has been discovered in Packet Power’s EMX and EG products, exposing critical infrastructure worldwide to the risk of unauthorized remote access and control. The vulnerability, designated CVE-2025-8284, allows attackers to bypass authentication entirely, offering a...

Amid a rapidly evolving cyber threat landscape, the recent joint advisory from the Cybersecurity and Infrastructure Security Agency (CISA) and the United States Coast Guard (USCG) shines a spotlight on the importance—and ongoing challenges—of cyber hygiene across America’s most vital...

Rockwell Automation, a global leader in industrial automation and information technology, finds itself at the forefront of a critical security challenge following the recent disclosure of high-severity vulnerabilities in its Lifecycle Services solutions that leverage VMware technologies. These...

Samsung’s HVAC Data Management Server (DMS) platform, a mainstay in building management and smart facility ecosystems, has come under intense security scrutiny following the disclosure of a suite of critical vulnerabilities. As global smart infrastructure continues to boom, the need for robust...