Elektrine
Log in Register

#ot

20 posts · Last used Sep 15

CERT@VDE @certvde@infosec.exchange
· 1mo ago
🔒 New CSAF advisory published VDE-2026-091 TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576 The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin… HTML: https://certvde.com/en/advisories/VDE-2026-091 CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json #OT #Advisory
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
certvde.com

TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 2mo ago
🔄 CSAF advisory updated (version 2.0.0) VDE-2026-051 iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator CVE-2026-8024 Changes: Added ibaLogic to the affected products and the mitigation for this product. HTML: https://certvde.com/en/advisories/VDE-2026-051 CSAF JSON: https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json #OT #Advisory
iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator
certvde.com

iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator

0
0
0
0
Claroty @Claroty@infosec.exchange
· 3mo ago
👋 Meet Claire, the industry's first CPS-native AI security agent. Designed to help security teams work smarter, Claire delivers AI-powered insights, simplifies complex investigations, and helps organizations protect their #OT, #IoT, #IoMT, and other cyber-physical environments with greater speed and confidence. 💡 Learn more: https://claroty.com/blog/how-claroty-claire-brings-ai-powered-cybersecurity-to-cyber-physical-systems #Cybersecurity #ArtificialIntelligence #AI #OTSecurity #CriticalInfrastructure #CPS #ClarotyClaire
How Claroty Claire™ Brings AI-Powered Cybersecurity to Cyber-Physical Systems
claroty.com

How Claroty Claire™ Brings AI-Powered Cybersecurity to Cyber-Physical Systems

Claroty Claire™, a CPS-native AI security agent, can help organizations heavy in cyber-physical systems assets prioritize the incoming rush of vulnerabilities uncovered by frontier AI models and coordinated through the White House’s Gold Eagle national vulnerability clearinghouse.

0
0
1
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-065 Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory. #CVE CVE-2026-9593 https://certvde.com/en/advisories/vde-2026-065/ #CSAF https://endress-hauser.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-065.json
Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library
certvde.com

Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-008 Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers Multiple vulnerabilities have been identified in the firmware of CHARX SEC-3xxx EV charging controllers, including the CHARX SEC-3000, SEC-3050, SEC-3100, and SEC-3150 models. The flaws could allow attackers to compromise the devices remotely, resulting in a complete loss of confidentiality, integrity, and availability. #CVE CVE-2026-7849, CVE-2026-44108, CVE-2026-44104, CVE-2026-44101, CVE-2026-44090, CVE-2026-44100, CVE-2026-44092, CVE-2026-44091, CVE-2026-44098, CVE-2026-44094, CVE-2026-44106, CVE-2026-44099, CVE-2026-44096, CVE-2026-44095, CVE-2026-44093, CVE-2026-44107, CVE-2026-44097, CVE-2026-44105, CVE-2026-44103, CVE-2026-44102 https://certvde.com/en/advisories/vde-2026-008/ #CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-008.json
Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers
certvde.com

Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-041 CODESYS PROFINET Controller - Out-of-bounds Write CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems. #CVE CVE-2026-35226 https://certvde.com/en/advisories/vde-2026-041/ #CSAF https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-06_vde-2026-041.json
CODESYS PROFINET Controller - Out-of-bounds Write
certvde.com

CODESYS PROFINET Controller - Out-of-bounds Write

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-085 Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands. #CVE CVE-2026-16462 https://certvde.com/en/advisories/vde-2026-085/ #CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-085.json
Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
certvde.com

Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-081 Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0. #CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510 https://certvde.com/en/advisories/vde-2026-081/ #CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities
certvde.com

Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-076 ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0. #CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510 https://certvde.com/en/advisories/vde-2026-076/ #CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
certvde.com

ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

0
0
0
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-077 Lenze: Incorrect signature validation in the enable SSH routine The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which could allow unauthorized access to the device. #CVE CVE-2026-14837 https://certvde.com/en/advisories/vde-2026-077/ #CSAF https://lenze.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-077.json
Lenze: Incorrect signature validation in the enable SSH routine
certvde.com

Lenze: Incorrect signature validation in the enable SSH routine

0
0
0
0
runZero, Inc @runZeroInc@infosec.exchange
· 3mo ago
Legacy Systems, Real-World Impacts: The Reality of OT Security In his latest SecurityWeek column, runZero's Tod Beardsley explores why vulnerability management in #OT is a completely different ballgame. As OT/IT convergence accelerates, we need to evolve our defense strategies before AI-assisted attackers take advantage of the hidden exposures and broken segmentation in these environments. Read Tod’s full analysis here: ➡️
Legacy Systems, Real-World Impacts: The Reality of OT Security
securityweek.com

Legacy Systems, Real-World Impacts: The Reality of OT Security

As IT and OT converge, researchers and defenders must rethink how vulnerabilities are discovered, disclosed, and mitigated in critical infrastructure.

1
0
1
0
CERT@VDE @certvde@infosec.exchange
· 3mo ago
#OT #Advisory VDE-2026-031 WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation. #CVE CVE-2026-4769 https://certvde.com/en/advisories/vde-2026-031/ #CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-031.json
WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
certvde.com

WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices

0
0
0
0
JTI @jti42@infosec.exchange
· 3mo ago
Gammel-OT, jetzt neu: Verteilt, unisoliert, noch verrotteter als sonst. Quasi die Plasterouter-Version von Groß-OT für das es ja wenigstens noch manchmal etwas zwangsmäßigen Effort gibt. Plasterouter-OT sozusagen. https://www.heise.de/news/Sicherheitsalbtraum-Wechselrichter-Hoymiles-laesst-Nachbarschaften-verstummen-11357067.html Die Schwachstelle klingt...uhm...garstig. Besonders der Drohnenansatz gefält. 😱 #ot #plasterouter #gammelot #solarpunk #solarpower #blackout
Sicherheitsalbtraum Wechselrichter: Hoymiles lässt Nachbarschaften verstummen
heise.de

Sicherheitsalbtraum Wechselrichter: Hoymiles lässt Nachbarschaften verstummen

Schwere Funkschwachstellen bei Hunderttausenden PV-Anlagen erlauben laut Forschern das Abschalten im Vorbeifahren und sogar die physische Zerstörung der Geräte.

1
1
1
0
Cyber℻ @eyetSystems@infosec.exchange
· 4mo ago
We spend so much time prepping for zero-day exploits from nation states. But this article suggests targeting water systems relies less on sophisticated malware and more on simple failures: weak passwords and poor segmentation in OT environments. It’s fundamentally a governance issue, not just a technical one. How robust is your organisation's strategy around systemic decay? #CyberSecurity #OT
Iran, Russia, China Target Water Systems for Sabotage
darkreading.com

Iran, Russia, China Target Water Systems for Sabotage

Iran, Russia, and China target water systems through weak passwords and exposed PLCs/HMIs, aiming for psychological impact and strategic prepositioning.

0
0
0
0
starkzarn :linux: @StarkZarn@infosec.exchange
· 4mo ago
RE: https://infosec.exchange/@ifin/116818011783363124 Security leaves no one behind #OT #ICS
Quoting
IFIN - The Independent Federated Intelligence Network
@ifin@infosec.exchange
If you're running Lantronix gear on the internet, you might want to check your logs for suspicious logins and command execution. https://discourse.ifin.network/t/lantronix-openwrt-luci-attacks/625 #ThreatIntel #ThreatIntelligence #IFIN
Open quoted post
0
0
2
0
Tara 🕷️:blobbat: @tarajdactyl@anarres.family
· 7mo ago
Boosted by @hypebot@goingdark.social
:boosts_ok_gay: attention anybody with substantial experience with Rust and networking: my team is hiring!! one of few rust jobs I'm aware of that is not web 3.0 horseplop. fully remote (US timezones), good culture, good trans-inclusive healthcare, good work/life balance, and a nice defensive cybersecurity mission i can get behind. feel free to reach out for more details and the job posting. :boosts_ok_gay:#fedihired #rust #infosec #cybersecurity #ot #ics
127
15
347
0
O Slovensku @slovensko@rockosbasilisk.com
· 8mo ago
Tisíce Čechů se po eskalaci na Blízkém východě hlásí do systému Drozd. Ministr zahraničí Petr Macinka (Motoristé) svolal krizový štáb a řeší repatriační lety z Izraele přes Egypt. Vyzývá občany, aby nepanikařili - pomoc je podle něj na prvním místě. Tón: : mírně negativní #česko #gdelt #blízkýVýchod #otázkyVáclavaMoravce(ovm) #petrMacinka
Pomoc Čechům je priorita, uvedl Macinka. Svolal na MZV krizový štáb - Novinky
novinky.cz

Pomoc Čechům je priorita, uvedl Macinka. Svolal na MZV krizový štáb - Novinky

Tisíce Čechů se po eskalaci na Blízkém východě hlásí do systému Drozd. Ministr zahraničí Petr Macinka (Motoristé) svolal krizový štáb a řeší repatriační lety z Izraele přes Egypt. Vyzývá občany, aby nepanikařili - pomoc je podle něj na prvním místě.

0
0
0
0