Vulnerabilitycritical
Cyble Urges Critical Vulnerability Fixes Affecting Industrial Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-3980+1 related CVE | The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations | 8.8 | <1% | ||
| CVE-2025-23120 | Domain-User RCE via Deserialization in Veeam Backup & Replication | 8.8 | 24% | PoC | |
| CVE-2025-25211 | Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions | 9.8 | <1% | ||
| CVE-2025-26689 | Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions | 9.8 | 1% |
From the original article
1 min read at infosecurity-magazine.com
Multiple industrial control system (ICS) devices are affected by vulnerabilities carrying critical severity ratings up to a 9. 9 CVSS base score. In an April 10 blog post , Cyble urged users of Rockwell Automation, Hitachi Energy and Inaba Denki Sangyo, three industrial hardware providers, to patch critical vulnerabilities in their products.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.