AI Module
AI reads every new manufacturer security bulletin and turns it into a short, ranked list your team can act on — not a stack of technical PDFs. Grows with every customer: a vendor gap found on one factory floor closes for everyone else too, once a human has reviewed it. Most complete when paired with the Passive Module.
Sold at the Site Analytics tier, alongside the Passive Module it pairs best with.
From dense bulletin to clear alert Preview — illustrative UI
Manufacturers publish security bulletins as dense technical PDFs. AI reads every one, matches it against the exact firmware on your device, and drafts a short, actionable alert — a human reviews it before it ever reaches your team.
2.1 Vulnerability CVE-2024-38475 has been identified affecting select SIMATIC S7-1500 CPU family products. An attacker with network access to port 443/tcp could bypass the web server authentication mechanism under certain configurations, potentially gaining unauthorized access to engineering functions...
2.4 Siemens has released new firmware version V2.9.5 which fixes this vulnerability and recommends customers update to the latest version. As a general security measure, Siemens strongly recommends protecting network access...
3.0 Workarounds and Mitigations — Siemens has identified the following specific workarounds and mitigations that customers can apply to reduce the risk...
A remote attacker on your network can bypass the web server login on this exact PLC and gain full engineering access — no credentials needed. This firmware version is on CISA's Known Exploited Vulnerabilities list, meaning it's already being used in attacks, not just a theoretical risk.
- Isolate CNC-014's engineering port (443/tcp) — allow only the SCADA link.
- Update to firmware V2.9.5 or later at the next maintenance window.
- Until patched, disable the web server in TIA Portal → Protection & Security.
Questions about enabling this on your site? Get in touch.