WinCC

Siemens publishing seventeen new advisories covering products including SIMATIC S7-1500 CPUs, industrial edge devices, and Ruggedcom Crossbow station access controller.

The SIMATIC S7-1500 advisory alone covers more than four hundred vulnerabilities in the GNU/Linux subsystem, high-severity issues affecting Ruggedcom Crossbow, uh, vulner-- um, SIMATIC, uh, IPCs, PSS, CYNICAL, and the .NET client library for SIMATIC S7 Web Server API, Industrial Edge App Publisher, and SIMATIC WinCC, among others.

Siemens has released patches for some vulnerabilities and provided mitigation for others pending permanent fixes.

Rockwell's advisory for, uh, 1732E ArmorBlock I/O modules covers a critical flaw allowing an unauthenticated attacker to change the device web server password, taking over an admin account without any credentials.