Vulnerabilities
Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Siemens, Schneider Electric, ABB and other industrial vendors have confirmed that some of their products are affected by the PHP2Shell vulnerabilities, SecurityWeek reported. The companies are reviewing their product portfolios to determine their exposure.
Several major industrial technology vendors, including Siemens, Schneider Electric and ABB, have confirmed that some of their products are affected by the group of flaws known as PHP2Shell, according to a report from SecurityWeek.
The vendors are reviewing their product portfolios to determine which devices and software packages contain the vulnerable PHP components, SecurityWeek said, adding that other manufacturers are also affected or still assessing their exposure.
As the name implies, the PHP2Shell vulnerabilities could allow an attacker to execute arbitrary commands — effectively gaining a shell — on a system running a vulnerable PHP installation. That kind of flaw is particularly sensitive in industrial environments, where PHP is often embedded in the web-based management interfaces of control equipment, remote access gateways and engineering tools. Successful exploitation of such interfaces can give attackers a foothold on operational technology networks that are otherwise difficult to reach.
SecurityWeek reported that the affected vendors have begun publishing or preparing security advisories so customers can identify exposed products and apply mitigations. Organizations running industrial equipment from the named vendors are advised to watch for vendor advisories, inventory which products rely on PHP-based web interfaces, and restrict network access to management interfaces where possible. Until patches or mitigations are in place, limiting exposure of such interfaces to trusted networks remains the standard defensive recommendation for industrial environments.
Source: SecurityWeek
