Patched Deserialization Flaw in Siemens Product Allows RCE

The Siemens Simatic Energy Manager Used an Unsafe BinaryFormatter Method
Researchers detailed a deserialization vulnerability in Siemens software used to monitor energy consumption in industrial settings and attributed the flaw to the German conglomerate's decision to use a programming method that has known security risks.

decision deserialization energy flaw german industrial manager monitor product programming rce risks security security risks settings siemens simatic software vulnerability