{"uuid": "2c9ac35c-e0a2-45d3-8eb4-04e13d5928eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22707", "type": "seen", "source": "https://t.me/hacking_Attack/16471", "content": "essed by the vendor is CVE-2021-22772, which carries a CVSS score of 9.1 and affects the Easergy T200 grid-automation platform. It\u2019s arises because of missing authentication for critical functions, which can allow attackers to carry out unauthorized operations.\n\nA third critical issue (CVE-2021-22707) exists in the vendor\u2019s smart-city EVlink Parking and other gear. It has a CVSS score of 9.4 and stems from the use of hard-coded credentials. Attackers could exploit it to issue unauthorized commands to the charging station web server with administrative privileges, according to Schneider.\n\nNo in-the-wild attacks have been spotted, researchers said, but these kinds of vulnerabilities in industrial control systems have opened the door to concerning attacks in the past. The Triton malware, for example, was spotted in 2018 targeting the Triconex Safety Instrumented System (SIS) from Schneider within petrochemical plants in Saudi Arabia. SIS are the last line of automated safety defense for industrial facilities, designed to prevent equipment failure and catastrophic incidents such as explosions or fire. See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker A handful of other malware also has targeted the physical process of ICS, such as the infamous Stuxnet\u00a0strain that was used to disrupt the Iranian nuclear program and the Industroyer/Crash Override malware that caused a power blackout\u00a0in Ukraine.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/patching-against-ransomware-100723134-large-90x90.jpg Kaseya Patches Zero-Days Used in REvil Attacks1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/cisco-90x90.jpg Cisco BPA, WSA Bugs Allow Remote Cyberattacks2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-8-90x90.png Coursera Flunks API Security Test in Researchers\u2019 Exam5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/macos-trojan-90x90.jpg MacOS Targeted in WildPressure APT Malware Campaign6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/i339637-90x90.jpg Western Digital Users Face Another RCE1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/shutterstock_1968890518-1-90x90.jpg Kaseya ransomware supply chain attack: What you need to know1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/printer-90x90.jpg CISA Offers New Mitigation for PrintNightmare Bug1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/router-90x90.jpg Netgear Authentication Bypass Allows Router Takeover2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/windows-bug-bounty-90x90.jpg PoC Exploit Circulating for Critical Windows Print Spooler Bug2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/linkedin-90x90.png Data for 700M LinkedIn Users Posted for Sale in Cyber-Underground2 weeks ago\nstyle=\"display:block; text-align:center;\"\n data-ad-layout=\"in-article\"\n data-ad-format=\"fluid\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"4517761481\"> \nThe post Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:02:33.452088Z"}