Monthly Patches are out for Siemens, Schneider Electric, and SAP. New Alerts for Microsoft Edge, Phoenix Contact, and Omron.
Monthly Patches for Microsoft and Adobe should be out this afternoon.
Palo Alto Networks Monthly Patches are due tomorrow.
Siemens
Siemens Monthly Patches are out, with 7 new bulletins and 23 updated bulletins. Of the new bulletins, highest CVSSv3 score of 9.8
More info.
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. Highest CVSSv3 score of 9.8
More info.
The Mendix SAML module insufficiently verifies the SAML assertions. This could allow a remote attacker to bypass authentication and get access to the application. CVSSv3 score of 9.1
More info.
The RADIUS client implementation of the VxWorks platform in SIPROTEC 5 devices contains a DoS that could be triggered when a specially crafted packet is sent by a RADIUS server. CVSSv3 score of 7.5
More info.
Multiple vulnerabilities affecting various third-party components of SCALANCE W-700 IEEE 802.11ax devices could allow a remote attacker to cause a DoS, disclose sensitive data or violate the system integrity. Highest CVSSv3 score of 8.1
More info.
Schneider Electric Monthly Patches include 3 new bulletins and 15 updated bulletins. Of the new bulletins, highest CVSSv3 score of 9.8
More info.
PowerLogic HDPM6000 products contain an improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in DoS or RCE. CVSSv3 score of 9.8
More info.
Multiple vulnerabilities exist in Data Server, Dashboard and Custom Reports modules for the IGSS. Highest CVSSv3 score of 8.8
More info.
SAP Patch Day is here, with 19 new Security Notes. 5 are rated Hot News, 4 rated High, and 10 rated Medium. Highest CVSSv3 score of 9.9
More info.
ENERGY AXC PU uses CODESYS Control V3 runtime system, which contains several vulnerabilities. Highest CVSSv3 score of 8.1
More info.
Microsoft has updated Edge with the latest chromium security fixes.
More info.
Monthly Patches are expected out later today.
Improper Access Control vulnerabilities exist in the CS/CJ/CP-series Programmable Controllers. A remote attacker can use these vulnerabilities to bypass protection system of the user memory, disable a password, overwrite a new password, and overwrite a code for executing the user program (object code) or a function block. CVSSv3 score of 9.1
More info.
Comments