Are industrial systems (Siemens, Schneider, Rockwell) safe right now?
1 flaw was added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run industrial systems, update now.
Exploited in the last 90 days
- Software CenterZero-daySiemens Software Center Uncontrolled Search Path Element Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
Earlier exploited flaws
- Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
- OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
- OpenPLC ScadaBR Cross-site Scripting Vulnerability
- Schneider Electric U.motion Builder SQL Injection Vulnerability
- Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
- Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 2 | 1 |
| 2025 | 2 | 0 |
| 2024 | 0 | 0 |
| 2023 | 0 | 0 |
| 2022 | 3 | 0 |
Questions
Are industrial systems (Siemens, Schneider, Rockwell) safe right now?
1 flaw was added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run industrial systems, update now. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many industrial systems vulnerabilities have been exploited?
7 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks.
Covers products matching siemens, schneider, rockwell, scada. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.