US government partners, including CISA and FBI, warn of cyber attacks targeting industrial refrigeration and cold chain monitoring systems, posing risks to inventory and public health through remote manipulation of temperature controls.
Two critical SQL injection vulnerabilities affect Subnet Solutions PowerSYSTEM Center versions 2020, 2024, and 2026, enabling authenticated users to execute unauthorized commands and access restricted resources.
The FBI and CISA issued guidance for critical infrastructure operators on managing cybersecurity risks posed by third-party industrial control system integrators, emphasizing access control and risk assessments.
A high-severity authentication vulnerability in Mitsubishi Electric GX Works3 and its Motion Control Settings allows local attackers to bypass password checks and manipulate control programs.
Multiple critical vulnerabilities with CVSS scores up to 9.9 impact Hitachi Energy's FACTS Control Platform, risking confidentiality, integrity, and availability in energy sector control systems.
Multiple high-severity vulnerabilities in Weintek cMT3092X HMI may allow attackers to escalate privileges and steal credentials, impacting critical manufacturing environments.