Industrial vendors assess products for PHP2Shell vulnerabilities
Summary
Industrial vendors are assessing their products for vulnerabilities associated with PHP2Shell, which consists of two critical PHP vulnerabilities that enable unauthenticated remote code execution on affected systems. While many core enterprise resource planning (ERP), product lifecycle management (PLM), and manufacturing execution systems (MES) do not typically use PHP, it can still be present in management interfaces and other operational technology (OT)-adjacent products. Vendor responses have varied, with Cisco reporting no affected products, while Siemens is investigating potential exposure, and Schneider Electric and ABB have issued advisories regarding their impacted OT products.
Analysis
industrial vendors: Industrial vendors are manufacturers and technology providers whose operational-technology products can include web interfaces or embedded PHP components. In the reported PHP2Shell response, vendors such as Siemens, Cisco, Palo Alto Networks, Schneider Electric, and ABB assessed affected products, with findings ranging from investigation to confirmed exposure and remediation activity. Vulnerability: PHP2Shell consists of two critical PHP vulnerabilities that can enable unauthenticated remote code execution on systems running affected PHP versions. Vendor response: Vendor assessments show varied impact: Cisco reported no currently known affected products while Siemens investigated exposure, and Schneider Electric and ABB published advisories covering affected OT products. Industrial exposure: Industrial environments are considered less broadly exposed because many core ERP, PLM, and MES systems do not use PHP, but PHP may still appear in management interfaces and OT-adjacent products.
Categories
tech
Related sources
- https://www.securityweek.com/tech-and-security-companies-respond-to-php2shell-vulnerabilities/
- https://www.engineering.com/php2shell-for-manufacturers-the-danger-goes-deeper-than-a-website/
- https://www.securityweek.com/rockwell-automation-patches-vulnerabilities-in-ics-controllers-and-software/
- https://www.redtigersecurity.com/advisory/php2shell-ot-vendor-bulletins-schneider-abb
- https://www.fortinet.com/blog/industry-trends/understanding-php2shell-vulnerabilities-and-reducing-risk-while-you-patch
- https://dev.to/max_bayern_b89482c0faf779/php2shell-in-ot-sites-why-the-vulnerability-will-linger-for-years-3hj3
- https://github.com/NCSC-NL/php2shell
- https://blog.checkpoint.com/ai-security/php2shell-one-in-ten-organizations-impacted-as-europe-bears-the-brunt/
- https://www.helpnetsecurity.com/2026/10/22/php2shell-vulnerability-fortinet-cisco-palo-alto-networks/
- https://github.com/hkoeck/php2shell-status