Security flaws found in widely used industrial software
Summary
A researcher at Ciscos Talos threat intelligence team found eight vulnerabilities in the Open Automation Software (OAS) platform that, if exploited, could enable a bad actor to access a device and run code on a targeted system. The vulnerabilities are just the latest cyber threat in an industrial sector that has become a larger target for bad actors in recent years, as illustrated by such high-profile ransomware attacks on companies like energy provider Colonial Pipeline and global meat processor JBS Foods. The flaw exists in the OAS Engine SecureTransferFiles functionality and a bad cybercriminal can exploit it by sending a sequence of network requests. Bad actors can exploit another flaw (CVE-2022-26026) by sending a network request that would result in a denial of service and a loss of communications and through two others (CVE-2022-26303 and CVE-2022-26043) make external configuration changes, such as creating a new security group and user accounts. Clemente pointed to the high-profile Stuxnet worm, which didnt immediately break such devices but changed their function in ways that led them to eventually fail while reporting back to monitoring systems that everything was operating normally.
Classifications
AskAI Classifications
LabelsLinked Companies
