Multiple Vulnerabilities in Industrial Control Systems - 22nd July 2026

Affected Environment
Rockwell Automation Studio 5000 Logix Designer, 1734 POINT I/O, 1718/1719-AENTR; Siemens CADRA, IAM Client, SIDIS SmartPlug, Opcenter X, RUGGEDCOM APE1808; Tycon Systems TPDIN-Monitor-WEB2.

Threat Overview
Multiple CVEs covering path traversal, remote code execution, denial of service, authentication bypass, and privilege escalation across OT products from two major vendors.

Exposure Timeline
Advisories issued 22nd July 2026. Rockwell Automation patch versions available; Siemens updates available per individual advisory guidance.

Attack Surface
Industrial programming environments, EtherNet/IP adapters, Siemens IAM and OPC server components, and web-enabled monitoring devices in OT networks.

Technical Root Cause
Studio 5000 flaws include path traversal in ACD project files, incorrect authorisation on configuration files, and unquoted search paths enabling executable hijacking.

Exploitation Pathway
Local or authenticated attacker opens malicious ACD project file or modifies external tool configuration. Network attacker sends crafted CIP messages to trigger DoS on POINT I/O modules.