[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQ0Epid9tLtWS9DeFP9x-9JNvTL-gX5AOzhA6KncpPXs":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"e9cd392e-8462-4ee4-b9e5-c6bf11d8a1aa","ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell","ics-patch-tuesday-vulnerabilities-fixed-by-siemens-schneider-rockwell-a452a1","The industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CERT. The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell appeared first on SecurityWeek.","Industrial giants Siemens, Schneider Electric, and Rockwell Automation have released advisories detailing numerous vulnerabilities in their Industrial Control System (ICS) products for July 2026. Siemens addressed six critical vulnerabilities, including one with a CVSS score of 10 allowing authentication bypass. Schneider Electric patched high-severity flaws in SCADA and admin expert products, while Rockwell Automation fixed two critical vulnerabilities enabling unauthorized CLI access and DoS attacks. These vulnerabilities, affecting various components, could lead to data breaches, code execution, and denial-of-service conditions.","Siemens, Schneider Electric, and Rockwell Automation patch critical ICS vulnerabilities in July 2026 advisories.","https:\u002F\u002Fwww.securityweek.com\u002Fics-patch-tuesday-vulnerabilities-fixed-by-siemens-schneider-rockwell\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F11\u002FICS_Patches.jpg","2026-07-15T09:19:58+00:00","2026-07-15T10:00:16.219813+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"Siemens","vendor",{"name":21,"type":19},"Schneider Electric",{"name":23,"type":19},"Rockwell Automation",{"name":25,"type":19},"ABB",{"name":27,"type":19},"Mitsubishi Electric",{"name":29,"type":30},"Opencenter X","product","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,23],{"controls":52,"vendors":133},[53,82,107],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":83,"name":84,"problem":85,"products":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":83,"product_name":104,"url":105,"description":106},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":108,"name":109,"problem":110,"products":111},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[112,117,125],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":113,"product_name":114,"url":115,"description":116},"tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[134],{"slug":135,"name":18,"logo_path":136,"roles":137},"siemens","\u002Fvendor-logos\u002Fsiemens.png",[138,139],"reported_by","affected",{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":156},"critical-ics-vulnerabilities-demand-urgent-patching-across-industrial-control-systems","Critical ICS Vulnerabilities Demand Urgent Patching Across Industrial Control Systems","Siemens, Schneider Electric, and Rockwell Automation disclosed multiple critical vulnerabilities in their ICS\u002FSCADA products, including a CVSS 10.0 authentication bypass in Siemens products and flaws enabling unauthorized CLI access and denial-of-service in Rockwell systems. The root cause lies in delayed or absent patch management processes for operational technology (OT) environments, where system uptime is often prioritized over timely security updates. These vulnerabilities are particularly dangerous because ICS systems control physical infrastructure — exploitation can lead to not just data breaches but real-world disruptions to energy, manufacturing, or utilities. The coordinated 'Patch Tuesday' disclosure model highlights that vendors are actively finding and fixing flaws, but organizations must have processes in place to rapidly assess and apply these patches before threat actors can exploit them.",[145,146,147,148,149,150,151,152,153,154,155],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 18: Penetration Testing","NIST SP 800-82: Guide to ICS Security","NIST CSF ID.AM-1: Asset Inventory","NIST CSF RS.MI-3: Newly identified vulnerabilities mitigated","NIST SP 800-40 Rev. 4: Patch Management Guide","IEC 62443-2-1: Security Management for ICS","IEC 62443-3-3: System Security Requirements and Security Levels","NERC CIP-007-6: Systems Security Management (patch management requirements)","ITIL: Change Management and Continual Service Improvement",{}]