Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

🗓️ 30 May 2024 17:00:00Reported by Microsoft Threat IntelligenceType

Recent attacks emphasize crucial need to protect internet-exposed OT devices. Attackers target poorly secured OT systems in water, wastewater, HVAC, and power plants, exploiting weak security measures, outdated software, and weak passwords, leading to compromise and control over critical parameters. Public and private sector facilities affected

Reporter	Title	Published	Views	Family All 18
ICS	IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including U.S. Water and Wastewater Systems Facilities	1 Dec 202312:00	–	ics
ICS	Unitronics Vision and Samba Series (Update A)	14 Dec 202307:00	–	ics
ATTACKERKB	CVE-2023-6448	5 Dec 202318:15	–	attackerkb
BDU FSTEC	The vulnerability of microprogrammed software in programmable logic controllers and human-machine interfaces of the Unitronics Vision Series allows a perpetrator to gain administrative access to the device.	11 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-6448	11 Dec 202318:10	–	circl
CISA KEV Catalog	Unitronics Vision PLC and HMI Insecure Default Password Vulnerability	11 Dec 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	11 Dec 202312:00	–	cisa
CISA	Exploitation of Unitronics PLCs used in Water and Wastewater Systems	28 Nov 202312:00	–	cisa
CNNVD	Unitronics PLC Trust Management Issue Vulnerabilities	5 Dec 202300:00	–	cnnvd
CVE	CVE-2023-6448	5 Dec 202317:43	–	cve