Decision Insights Threat Desk

Siemens has addressed vulnerabilities in Altair Grid Engine versions prior to V2026.0.0, which can allow attackers to escalate privileges. CISA advises updates, mitigations, and cybersecurity practices to minimize risks.

CISA will discontinue updates on Siemens product vulnerabilities, urging users to update software and adopt cybersecurity measures.

CISA will cease updates for Siemens ICS security advisories after January 10, 2023. Siemens reports vulnerabilities in COMOS software versions prior to 10.4.5, with risk of code execution and data infiltration. Users are advised to upgrade software and follow additional security measures to mitigate risks.

CISA will cease updates on Siemens ICS security advisories for product vulnerabilities. The SICAM P850 and P855 families face vulnerabilities allowing unauthorized actions via CSRF and session hijacking. Users are urged to update to version 3.11 or later and follow recommended security practices.

Siemens will cease updating ICS security advisories for LOGO! 8 BM Devices, citing vulnerabilities that may allow remote code execution.

Rockwell Automation identifies a path traversal vulnerability in its AADvance-Trusted SIS Workstation versions 2.00.00 to 2.00.04, which could enable remote code execution. Users are advised to upgrade to version 2.01.00 or later to mitigate risks associated with this exploit.