Security News > 2021 > May > Siemens Addresses 60 Vulnerabilities Introduced by Third-Party Components
Siemens' May 2021 Patch Tuesday advisories address roughly 60 vulnerabilities introduced by the use of third-party components.
The German industrial giant has released more than a dozen advisories to inform customers about tens of vulnerabilities affecting RUGGEDCOM, SCALANCE, SIMATIC, SINEMA, SINAMICS and other products.
Of the 14 advisories published this week, nine cover 60 vulnerabilities related to third-party components.
The advisories related to third-party software address the "SAD DNS" cache poisoning vulnerability in the Linux kernel, tens of vulnerabilities in the UltraVNC and SmartVNC remote access tools, two issues in Mendix modules, six issues affecting industrial PCs and other devices powered by Intel CPUs, and 19 vulnerabilities in Aruba Instant Access Point.
Learn more about vulnerabilities in industrial systems at SecurityWeek's ICS Cyber Security Conference and SecurityWeek's Security Summits virtual event series.
The issues specific to Siemens products are related to how SCALANCE devices handle OSPF packets, how the Tecnomatix Plant Simulation product handles SPP files, and how SIMATIC NET CP devices handle specially crafted TCP packets.