[Control systems] Siemens security advisory (AV25-327)

Serial number: AV25-327
Date: June 10, 2025

On June 10, 2025, Siemens published advisories to address vulnerabilities in multiple products. Included were updates for the following products:

  • Energy Services
  • RUGGEDCOM APE1808
  • RUGGEDCOM RST2428P (6GK6242-6PA00) – versions prior to V3.2
  • SCALANCE XC-300 products – versions prior to V3.2
  • SCALANE XC-400 products – versions prior to V3.2
  • SCALANCE XCM-/XRM-/XCH-/XRH-300 products – versions prior to V3.2
  • SCALANCE XM-400/XR-500 products – versions prior to V3.2
  • SCALANCE XR-300 (6GK5334-xTSxx) products – versions prior to V3.2
  • SIMATIC S7-1500 CPU products – version V3.1.5 and later
  • Technomatix Plant Simulation V2404 – versions prior to V2404.0013

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

Date modified: