{"vulnerability": "cve-2021-22779", "sightings": [{"uuid": "d7c3bb35-0da3-4e0f-8faf-beea228a121b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22779", "type": "seen", "source": "https://t.me/ics_cert/462", "content": "\ud83d\udea8  \u0647\u0634\u062f\u0627\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc PLC \u0647\u0627\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 M340 \u0648 M580 :\n\u2623\ufe0f \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631:\n\u2022 EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro) \n\u2022 EcoStruxure Control Expert V15.0 SP1 \n\u2022 EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS) \n\u2022 SCADAPack RemoteConnect for x70 (all versions) \n\u2022 Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*) \u2022 Modicon M340 CPU (all versions - part numbers BMXP34*)\n\n\ud83d\udd34 \u0644\u06cc\u0633\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc\u0647\u0627\u06cc \u06a9\u0634\u0641 \u0634\u062f\u0647:\n\n1\ufe0f\u20e3 \u0634\u0646\u0627\u0633\u0647 CVE: CVE-2021-22778CVSS v3.1 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 8.6 | \u0628\u0627\u0644\u0627 | : \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631\u0627\u062a \u06a9\u0627\u0641\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0634\u062f\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0634\u0648\u062f \u0628\u0644\u0648\u06a9 \u0647\u0627\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f \u0645\u062d\u0627\u0641\u0638\u062a \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u063a\u06cc\u0631 \u0645\u062c\u0627\u0632 \u0647\u0646\u06af\u0627\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0631\u0648\u0646\u062f\u0647 \u067e\u0631\u0648\u0698\u0647 \u062e\u0648\u0627\u0646\u062f\u0647 \u06cc\u0627 \u0627\u0635\u0644\u0627\u062d \u0634\u0648\u0646\u062f.\n\n2\ufe0f\u20e3  \u0634\u0646\u0627\u0633\u0647 CVE: CVE-2021-22779CVSS v3.1 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 9.8 | \u062d\u06cc\u0627\u062a\u06cc | : \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062a\u0648\u0633\u0637 Spoofing \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u062c\u0639\u0644 \u0627\u0631\u062a\u0628\u0627\u0637 Modbus \u0628\u06cc\u0646 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0645\u0647\u0646\u062f\u0633\u06cc \u0648 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u060c \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u062f\u0631 \u062d\u0627\u0644\u062a \u062e\u0648\u0627\u0646\u062f\u0646 \u0648 \u0646\u0648\u0634\u062a\u0646 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0645\u0646\u062c\u0631 \u0634\u0648\u062f. !!!\n\n3\ufe0f\u20e3 \u0634\u0646\u0627\u0633\u0647 CVE: CVE-2020-12525CVSS v3.1 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 7.3 | \u0628\u0627\u0644\u0627 |:\nHM&M \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 fdtCONTAINER \u06a9\u0627\u0645\u067e\u0648\u0646\u0646\u062a \u062f\u0631 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc 3.5.20304.x \u0648 \u0628\u06cc\u0646 3.6 \u062a\u0627 3.6.20304.x \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0645\u062d\u0631\u0648\u0645\u06cc\u062a \u0632\u062f\u0627\u06cc\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u062f\u0631 \u0630\u062e\u06cc\u0631\u0647 \u0633\u0627\u0632\u06cc \u067e\u0631\u0648\u0698\u0647 \u062e\u0648\u062f \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a. \u062a\u0648\u062c\u0647: \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0645\u062d\u0644\u06cc \u062f\u0631 \u0627\u06cc\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u062f\u0631 \u0647\u0646\u06af\u0627\u0645 \u067e\u0631\u0648\u0698\u0647 \u0645\u062e\u0631\u0628 \u0634\u0648\u062f \u067e\u0631\u0648\u0646\u062f\u0647 \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0645\u0647\u0646\u062f\u0633\u06cc \u0628\u0627\u0631\u06af\u06cc\u0631\u06cc \u0645\u06cc \u0634\u0648\u062f.\n\n4\ufe0f\u20e3 \u0634\u0646\u0627\u0633\u0647 CVE: CVE-2021-22780CVSS v3.1 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 7.1 | \u0628\u0627\u0644\u0627 | : \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631 \u06a9\u0627\u0641\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0634\u062f\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u067e\u0631\u0648\u0646\u062f\u0647 \u067e\u0631\u0648\u0698\u0647 \u0645\u062d\u0627\u0641\u0638\u062a \u0634\u062f\u0647 \u0628\u0627 \u06af\u0630\u0631\u0648\u0627\u0698\u0647 \u0634\u0648\u062f \u060c \u062f\u0631\u0635\u0648\u0631\u062a \u0627\u0634\u062a\u0631\u0627\u06a9 \u0627\u06cc\u0646 \u067e\u0631\u0648\u0646\u062f\u0647 \u0628\u0627 \u0645\u0646\u0627\u0628\u0639 \u063a\u06cc\u0631\u0645\u0639\u062a\u0628\u0631. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0627\u0632 \u062d\u0641\u0627\u0638\u062a \u0627\u0632 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0639\u0628\u0648\u0631 \u06a9\u0646\u062f \u0648 \u0628\u062a\u0648\u0627\u0646\u062f \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u067e\u0631\u0648\u0698\u0647 \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u0648 \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u062f.\n\n5\ufe0f\u20e3 \u0634\u0646\u0627\u0633\u0647 CVE: CVE-2021-22781CVSS v3.1 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 6.2 | \u0645\u062a\u0648\u0633\u0637   | : \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0639\u062a\u0628\u0627\u0631 \u06a9\u0627\u0641\u06cc \u0645\u062d\u0627\u0641\u0638\u062a \u0646\u0634\u062f\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0646\u0634\u062a \u0627\u0639\u062a\u0628\u0627\u0631 SMTP \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0635\u0646\u062f\u0648\u0642 \u067e\u0633\u062a\u06cc \u0634\u0648\u062f \u0648\u0642\u062a\u06cc \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u067e\u0631\u0648\u0698\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n6\ufe0f\u20e3 \u0634\u0646\u0627\u0633\u0647 CVE: CVE-2021-22782CVSS v3.1 \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 6.2 | \u0645\u062a\u0648\u0633\u0637   | : \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0646\u0634\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0648\u062f \u060c \u062f\u0631\u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u067e\u0631\u0648\u0646\u062f\u0647 \u067e\u0631\u0648\u0698\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f \u060c \u0628\u0627\u0639\u062b \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0634\u0628\u06a9\u0647 \u060c \u067e\u0631\u062f\u0627\u0632\u0634 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u060c \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647 \u0647\u0627 \u06cc\u0627 \u062f\u0627\u0631\u0627\u06cc\u06cc \u0647\u0627\u06cc \u0645\u0639\u0646\u0648\u06cc \u0645\u06cc \u0634\u0648\u062f.\n\n\u2705 \u0645\u0633\u062a\u0646\u062f \u0634\u0631\u06a9\u062a \u0627\u0634\u0646\u0627\u06cc\u062f\u0631:\nhttps://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2021-07-15T11:07:30.000000Z"}, {"uuid": "6cb1b9d1-625e-4892-98a6-bfb67e4b861d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22779", "type": "seen", "source": "https://t.me/CyberGovIL/1299", "content": "Com7859 | Schneider Electric \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\n\n\u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d7\u05d1\u05e8\u05ea \u05e9\u05e0\u05d9\u05d9\u05d3\u05e8 \u05d0\u05dc\u05e7\u05d8\u05e8\u05d9\u05e7 \u05e2\u05d3\u05db\u05d5\u05df \u05d0\u05d1\u05d8\u05d7\u05d4 \u05dc\u05de\u05e1\u05e4\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d4\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05d4\u05e4\u05d2\u05d9\u05e2\u05d9\u05dd \u05d4\u05dd:\nEcoStruxure Control Expert \u2013 \u05d2\u05e8\u05e1\u05d4 V15.0 SP1 \u05d5\u05db\u05dc \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e7\u05d5\u05d3\u05de\u05d5\u05ea \u05dc\u05d4\n\nEcoStruxure Process Expert \u2013 \u05db\u05dc \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea\n\nSCADAPack RemoteConnect for x70 \u2013 \u05db\u05dc \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea\n\n\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2021-22779) \u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9\u05ea \u05d2\u05dd \u05dc\u05e9\u05ea\u05d9 \u05e1\u05d3\u05e8\u05d5\u05ea \u05d1\u05e7\u05e8\u05d9\u05dd \u05de\u05ea\u05d5\u05e6\u05e8\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4:\n\nModicon M580 CPU (part numbers BMEP* and BMEH*), all versions\n\nModicon M340 CPU (part numbers BMXP34*), all versions\n\n\u05dc\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d6\u05d5 \u05e6\u05d9\u05d5\u05df CVSS 9.8, \u05d5\u05d4\u05d9\u05d0 \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05de\u05e2\u05e7\u05e3 \u05e9\u05dc \u05de\u05e0\u05d2\u05e0\u05d5\u05df \u05d4\u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d1\u05d1\u05e7\u05e8\u05d9\u05dd,\n\n\u05d1\u05d0\u05d5\u05e4\u05df \u05e9\u05d9\u05d0\u05e4\u05e9\u05e8 \u05d2\u05d9\u05e9\u05d4 \u05d1\u05dc\u05ea\u05d9 \u05de\u05d5\u05e8\u05e9\u05d9\u05ea \u05d0\u05dc\u05d9\u05d4\u05dd \u05dc\u05e7\u05e8\u05d9\u05d0\u05d4 \u05d5\u05db\u05ea\u05d9\u05d1\u05d4, \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d6\u05d9\u05d5\u05e3 (Spoofing) \u05e9\u05dc \u05ea\u05e2\u05d1\u05d5\u05e8\u05ea \u05e4\u05e8\u05d5\u05d8\u05d5\u05e7\u05d5\u05dc Modbus\n\n\u05d1\u05d9\u05df \u05d4\u05d1\u05e7\u05e8 \u05dc\u05e2\u05de\u05d3\u05ea \u05d4\u05d4\u05e0\u05d3\u05e1\u05d4 (Engineering Workstation).\n\n\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea:\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05d8\u05de\u05d9\u05e2 \u05d0\u05ea \u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05e9\u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4.\n\u05e8\u05d0\u05d5 \u05e4\u05e8\u05e1\u05d5\u05dd \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d1\u05e7\u05d9\u05e9\u05d5\u05e8 https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01", "creation_timestamp": "2021-07-19T16:38:08.000000Z"}, {"uuid": "a1c46546-2a8b-43f8-a13b-b1505c267159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22779", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/463", "content": "\u0628\u0628\u06cc\u0646\u06cc\u062f: \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645 \u0646\u0645\u0627\u06cc\u0634 \u0628\u0631\u0627\u06cc CVE-2021-22779. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc PLC \u0647\u0627\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 M340 \u0648 M580 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f \u0648 \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2021-07-15T11:21:06.000000Z"}, {"uuid": "bd9ef5cb-214b-4239-998d-9d4be45fc082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22779", "type": "seen", "source": "https://t.me/true_secator/3489", "content": "\u0412\u0441\u0435 \u0442\u0430\u0439\u043d\u044b \u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Schneider Electric UMAS \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e.\n\nUMAS (Unified Messaging Application Services) \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Schneider Electric (SE), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Schneider Electric PLC.\n\n\u041e\u043d \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0432 \u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 Schneider Electric, \u043a\u0430\u043a Modicon M580 CPU\u00a0\u0438 Modicon M340 CPU. \u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u043e\u0433\u043e \u041f\u041e \u2014 EcoStruxure Control Expert (Unity Pro), EcoStruxure Process Expert.\n\n\u0412 2020 \u0433\u043e\u0434\u0443 \u0432 \u041f\u041e \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 CVE-2020-28212, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0443\u0436\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u041f\u041b\u041a \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0414\u043b\u044f \u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b Application Password, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u041f\u041b\u041a \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439. \n\n\u0414\u043b\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u041f\u041b\u041a \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u00ab\u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u00bb. \u042d\u0442\u0430 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0440\u043e\u043b\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Application Password \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043b\u044e\u0447\u0430 \u0441\u0435\u0441\u0441\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 Application Password \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e EcoStruxure Control Expert \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0422\u0430\u043a\u0436\u0435 Application Password \u0432\u043d\u043e\u0441\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0430\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Kaspersky ICS CERT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0443\u0436\u0435 \u0432 \u043d\u043e\u0432\u043e\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435. \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0442 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u043e\u0433\u043e \u041f\u041e EcoStruxure Control Expert.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0CVE-2021-22779\u00a0\u0434\u0430\u0432\u0430\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u041f\u041b\u041a.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0434\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b UMAS \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2021-22779, \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 SE.\n\n\u041a \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Schneider Electric \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u041f\u041e EcoStruxure Control Expert, \u041f\u041b\u041a Modicon M340 \u0438 \u041f\u041b\u041a Modicon M580 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0431\u0430\u0433\u0438.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u043e\u0432 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Kaspersky ICS CERT (\u0437\u0434\u0435\u0441\u044c).", "creation_timestamp": "2022-09-29T14:00:07.000000Z"}, {"uuid": "bdf3abc8-458e-4c1e-8071-356be920b8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22779", "type": "seen", "source": "https://t.me/hacking_Attack/16470", "content": "Black Hat Ethical Hacking\nUnpatched Critical RCE Bug Allows Industrial, Utility Takeovers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Unpatched Critical RCE Bug Allows Industrial, Utility TakeoversPost Views: 56 \nReading Time: 1 Minute\nA critical remote code-execution (RCE) vulnerability in Schneider Electric programmable logic controllers (PLCs) has come to light, which allows unauthenticated cyberattackers to gain root-level control over PLCs used in manufacturing, building automation, healthcare and enterprise environments.\nIf exploited, attackers could impact production lines, sensors and conveyor belts in factory settings, according to the researchers at Armis who discovered the bug \u2013 as well as affect devices familiar to the everyday consumer, such as elevators, HVACs and other automated devices.\n\nThe vulnerability (CVE-2021-22779), which takes advantage of undocumented commands in device code, impacts the Modicon M340, M580 and other models from the Modicon series, according to Armis, which dubbed it \u201cModiPwn.\u201d It\u2019s technically an authentication bypass by spoofing vulnerability, researchers said, and it rates 9.8 out 10 on the CVSS vulnerability-rating scale, making it critical. It\u2019s one of a slew of bugs addressed by the vendor on Tuesday.\n\nAny attack would begin with gaining network access to the same network to which the targeted Modicon PLC is attached, researchers said \u2013 a positive mitigation in that the extra, required first step makes it harder for an attacker to be successful.\n\nHowever, \u201cthrough this access, the attacker can leverage undocumented commands in the UMAS protocol and leak a certain hash from the device\u2019s memory,\u201d according to Armis\u2019 analysis, released on Tuesday. UMAS is a proprietary protocol used to configure and monitor Schneider PLCs.\n\nResearchers added, \u201cUsing this hash, the attacker can take over the secure connection between the controller and its managing workstation to reconfigure the controller with a password-less configuration. This will allow the attacker to abuse additional undocumented commands that lead to remote-code-execution \u2014 a full takeover of the device.\u201d\nSee Also: Kaseya ransomware supply chain attack: What you need to know This takeover can then be used to install malware on the controller, alter its operation and then hide the attack\u2019s breadcrumbs from the workstation that manages the controller, they added. No Patch AvailableSchneider has released a set of mitigations\u00a0for the bug, but no full patch is available yet.\n\n\u201cArmis and Schneider Electric have worked together to ensure the proper security mitigations are being provided. We urge all affected organizations to take action now,\u201d said Ben Seri, with Armis, in a statement. \u201cThe trouble with these legacy devices found in OT environments is that historically, they have evolved over unencrypted protocols. It will take time to address these weak underlying protocols. In the meantime, organizations operating in these environments should ensure that they have visibility over these devices to see where their points of exposure lie. This is crucial to preventing attackers from being able to control their systems \u2013 or even hold them to ransom.\u201d\nSee Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Schneider\u2019s Slew of ICS Patches\u201cModiPwn\u201d is just one of the security holes addressed by the ICS giant on Tuesday. In all, Schneider released\u00a0dozens of new patches and mitigations for various flaws across its entire product portfolio (most of them rating medium or high-severity), and updates for many other existing advisories.\n\nTwo other critical bugs stood out, however: One addr[...]", "creation_timestamp": "2026-09-01T20:02:33.767034Z"}, {"uuid": "1d1adccc-49bd-4e8e-932f-7258af167589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22779", "type": "seen", "source": "https://t.me/hacking_Attack/16470", "content": "Black Hat Ethical Hacking\nUnpatched Critical RCE Bug Allows Industrial, Utility Takeovers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Unpatched Critical RCE Bug Allows Industrial, Utility TakeoversPost Views: 56 \nReading Time: 1 Minute\nA critical remote code-execution (RCE) vulnerability in Schneider Electric programmable logic controllers (PLCs) has come to light, which allows unauthenticated cyberattackers to gain root-level control over PLCs used in manufacturing, building automation, healthcare and enterprise environments.\nIf exploited, attackers could impact production lines, sensors and conveyor belts in factory settings, according to the researchers at Armis who discovered the bug \u2013 as well as affect devices familiar to the everyday consumer, such as elevators, HVACs and other automated devices.\n\nThe vulnerability (CVE-2021-22779), which takes advantage of undocumented commands in device code, impacts the Modicon M340, M580 and other models from the Modicon series, according to Armis, which dubbed it \u201cModiPwn.\u201d It\u2019s technically an authentication bypass by spoofing vulnerability, researchers said, and it rates 9.8 out 10 on the CVSS vulnerability-rating scale, making it critical. It\u2019s one of a slew of bugs addressed by the vendor on Tuesday.\n\nAny attack would begin with gaining network access to the same network to which the targeted Modicon PLC is attached, researchers said \u2013 a positive mitigation in that the extra, required first step makes it harder for an attacker to be successful.\n\nHowever, \u201cthrough this access, the attacker can leverage undocumented commands in the UMAS protocol and leak a certain hash from the device\u2019s memory,\u201d according to Armis\u2019 analysis, released on Tuesday. UMAS is a proprietary protocol used to configure and monitor Schneider PLCs.\n\nResearchers added, \u201cUsing this hash, the attacker can take over the secure connection between the controller and its managing workstation to reconfigure the controller with a password-less configuration. This will allow the attacker to abuse additional undocumented commands that lead to remote-code-execution \u2014 a full takeover of the device.\u201d\nSee Also: Kaseya ransomware supply chain attack: What you need to know This takeover can then be used to install malware on the controller, alter its operation and then hide the attack\u2019s breadcrumbs from the workstation that manages the controller, they added. No Patch AvailableSchneider has released a set of mitigations\u00a0for the bug, but no full patch is available yet.\n\n\u201cArmis and Schneider Electric have worked together to ensure the proper security mitigations are being provided. We urge all affected organizations to take action now,\u201d said Ben Seri, with Armis, in a statement. \u201cThe trouble with these legacy devices found in OT environments is that historically, they have evolved over unencrypted protocols. It will take time to address these weak underlying protocols. In the meantime, organizations operating in these environments should ensure that they have visibility over these devices to see where their points of exposure lie. This is crucial to preventing attackers from being able to control their systems \u2013 or even hold them to ransom.\u201d\nSee Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Schneider\u2019s Slew of ICS Patches\u201cModiPwn\u201d is just one of the security holes addressed by the ICS giant on Tuesday. In all, Schneider released\u00a0dozens of new patches and mitigations for various flaws across its entire product portfolio (most of them rating medium or high-severity), and updates for many other existing advisories.\n\nTwo other critical bugs stood out, however: One addr[...]", "creation_timestamp": "2026-09-02T01:03:07.727537Z"}]}