Monthly Patches are out for Siemens, Schneider Electric, and SAP. New Alerts for Google Chrome, Apache, Zoom, and Linux.
Monthly Patches for Microsoft and Adobe are expected this afternoon.
Siemens
Monthly Patches include 27 bulletins, 11 new and 16 updated. Highest CVSSv4 score of 9.5
More info.
Multiple products contain two authentication bypass vulnerabilities that could allow a remote attacker to gain access to the data managed by the server. CVSSv3 score of 9.1
More info.
SINAMICS S200 devices contain an unlocked bootloader vulnerability that could allow a remote attacker to download untrusted firmware that could damage or compromise the device. CVSSv4 score of 9.5
More info.
SINEMA Remote Connect Client is affected by multiple vulnerabilities. Highest CVSSv3 score of 9.8
More info.
SiPass integrated ACC devices contain multiple vulnerabilities that could allow a remote attacker to access sensitive data. Highest CVSSv4 score of 9.4
More info.
Monthly Patches include 5 bulletins, 3 new and 2 updated. Of the new bulletins, highest CVSSv4 score of 9.2
More info.
A vulnerability in WebHMI component used in EcoStruxure Power Automation System User Interface and EcoStruxure Microgrid Operation Large (EMO-L) solution allows a remote attacker to execute unauthorized commands. Requires default password credentials. CVSSv4 score of 9.2
More info.
Security Patch Day saw the release of 21 new Security Notes and 3 updated. Five are rated High, 14 rated Medium, and 5 rated Low. Of the new bulletins, highest CVSSv3 score of 8.8
More info.
Chrome for Desktop has been updated to fix 5 security vulnerabilities, 3 rated High, 2 rated Medium.
More info.
Microsoft is aware. More info.
Tomcat has been updated to fix an RCE vulnerability.
More info.
Zoom has published 5 bulletins for Apps and Workplace Apps for iOS, 4 rated High and 1 rated Medium.
More info.
Insufficient verification of data authenticity in some Zoom Workplace Apps may allow a remote attacker to conduct a denial of service via network access. CVSSv3 score of 6.5
More info.
Red Hat has updated the kernel and kernel-rt. More info.
Oracle Linux has updated the kernel. More info.
