Industrial & OT security incidents and patch status

Today's specials

Nobody has a patch. Unplug things.

Siemens SIMATIC S7-1500 TM MFP1 d Vulnerabilities high severity
Do now Restrict network access to the Siemens SIMATIC S7-1500 TM MFP and watch for a vendor fix. Advisory

The fix exists. Somebody has to carry it.

Siemens Software Center6 h Uncontrolled Search Path Element 🔥 On the fly · exploitedKEV due in 11dhigh severity
Fix available. Upgrade to the vendor's patched release. Advisory
Siemens Industrial Edge App1 d Publisher critical severity
Fix available. Upgrade to the vendor's patched release. Advisory
Siemens RUGGEDCOM CROSSBOW1 d Vulnerability high severity
Fix available. Upgrade to the vendor's patched release. Advisory
Siemens WinCC1 d Database Privilege Escalation high severity
Fix available. Upgrade to the vendor's patched release. Advisory

Nobody has said yet. Read the advisory.

Siemens SENTRON 3NA COM Fuse1 d Denial-of-Service 🔥 On the fly · exploitedmedium severity
Do now Restrict network access to the Siemens SENTRON 3NA COM Fuse and monitor it for denial-of-service outages. Advisory
Siemens SIMATIC S7 PLCs Web Server1 d Vulnerabilities critical severity
Do now Restrict network access to the S7-1500 web server and watch for a Siemens fix. Advisory

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.

Rockwell Multiple Products5 Mar 2026 Insufficient Protected Credentials 🔥 On the fly · exploitedhigh severity
Fix available. Upgrade to the vendor's patched release.