ICS/OTICS Patch Tuesday - Siemens, Schneider Electric Address Over 100 Vulnerabilities


With their March 2023 Patch Tuesday security warnings, Siemens and Schneider Electric have fixed more than 100 vulnerabilities. Siemens has only published seven new advisories, but they cover 92 vulnerabilities in total. Instead of being unique to Siemens products, the great majority are introduced by the usage of third-party components.

In the case of Ruggedcom and Scalance devices, 65 vulnerabilities affecting elements including the Linux kernel, Busybox, OpenSSL, and OpenVPN have been addressed. Exploiting these vulnerabilities could result in code injection or a denial of service (DoS) issue.

Read More…