ICS Advisory: Siemens RUGGEDCOM and SCALANCE M-800/S615 Family

Summary:

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. A total of 9 vulnerabilities have been identified in Siemens SCALANCE M-800/S615 product family, affecting various devices. The vulnerabilities can allow an attacker to inject code, spawn a system root shell, or cause a denial of service condition. Siemens recommends updating to the latest version (V8.0 or later) to mitigate these vulnerabilities. Additionally, general security measures such as minimizing network exposure, isolating devices, and using secure remote access methods are also recommended.