CISA flags critical ICS vulnerabilities in Siemens, Schneider Electric, ABB equipment affecting critical sectors

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released on Tuesday five ICS (industrial control systems) advisories, providing timely information about current security issues, vulnerabilities, and exploits surrounding critical hardware. The agency warned of security flaws in Siemens, Schneider Electric, and ABB hardware deployed across critical infrastructure installations.

In an advisory, CISA warned of the presence of an ‘Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)’ vulnerability in Siemens’ TeleControl Server Basic versions before V3.1.2.2, deployed globally across the energy, water and wastewater, and transportation sectors. “Successful exploitation of these vulnerabilities could allow an attacker to read and write to the application’s database, cause a denial-of-service condition, and execute code in an OS shell,” it added.

Read more at Industrial Cyber