Claroty Discloses Multiple Critical Vulns in Vendor ...
In a blog post, the vendor described the security issues as exposing organizations using the vulnerable products to distributed denial-of-service attacks, remote code execution, and leaks and theft of sensitive data. "Many commercial [industrial control system] products use the OPC protocol for the secure exchange of information between devices across an operational technology network," says Uri Katz, protocol researcher at Claroty. The protocol ensures interoperability between proprietary industrial control systems and is a critical piece of an OT network. Vulnerabilities in vendor implement...
Source: darkreading.com