Monthly Patches are out for SAP, Siemens, and Schneider Electric. New Alerts for Apple (Exploit), Phoenix Contact, and Linux. Monthly Patches for Microsoft and Adobe are expected later today.
SAP
SAP Monthly Patches include 15 new bulletins and 2 updates. Of the new bulletins 2 is rated Hot News, 4 are rated High, 7 are rated Medium, and 2 are rated Low. The 2 updated bulletins are both rated Hot News.
More info.
Siemens Monthly Patches include 13 new bulletins and 15 new bulletins. Of the new bulletins, highest CVSSv3 score of 9.8
More info.
A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a DoS. CVSSv3 score of 7.5
More info.
Siemens User Management Component (UMC) is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server. Highest CVSSv3 score of 7.5
More info.
Multiple vulnerabilities have been identified in the GNU/Linux subsystem of the firmware for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP. Highest CVSSv3 score of 9.8
No patches yet.
More info.
Schneider Electric has released 3 new bulletins and 1 updated bulletin in the Monthly Patches. Highest CVSSv3 score of 10.
More info.
Redis is included in Plant iT/Brewmaxx, and is prone to a Lua sandbox escape, which could result in RCE. CVSSv3 score of 10.
No patches yet.
More info.
Apple has published updates with fixes for 43 vulnerabilities for Safari, iOS, iPadOS, macOS, tvOS, and watchOS. Eleven of the vulnerabilities are rated Critical, 2 are being exploited.
More info. And here.
Phoenix Contact has published 6 new bulletins identifying vulnerabilities in MULTIPROG Engineering tool and ProConOS eCLR SDK, ProConOS, Automation Worx and classic line controllers, and PLCnext. Highest CVSSv3 score of 9.8
More info.
Red Hat has updated kpatch. More info.
Oracle Linux has updated the kernel. More info.
Ubuntu has updated the kernel. More info.
Comments