Siemens PSS SINCAL software is vulnerable to a denial-of-service attack when using a specific legacy license dongle. The flaw exists in a third-party driver that fails to properly validate input, potentially causing a system crash. Versions 21.5, 22.0, and 22.5 prior to update 5 are affected by this out-of-bounds write issue. Siemens advises users to manually install a newer runtime version or update the software to mitigate the risk. The advisory highlights the importance of network segmentation and resilient protection schemes for critical infrastructure operators.
Read the full story at cisa.gov.
Photo: 2427999 / Pixabay
