Industrial Vendors Check Products for PHP2Shell Vulnerabilities

Multiple leading industrial vendors — Siemens, Schneider Electric, and ABB — confirmed their operational technology (OT) products were vulnerable to critical PHP engine flaws enabling unauthenticated remote code execution, exploited in the wild before patches were available. The root cause lies in inadequate vulnerability management: OT environments frequently lag behind IT environments in patching cadence due to uptime requirements and limited vendor support windows. This matters enormously because compromised OT systems can bridge digital attacks into physical processes, threatening safety, production continuity, and critical infrastructure. The zero-day exploitation window demonstrates that relying solely on vendor patches is insufficient without compensating controls such as network segmentation and monitoring.