Perímetro
Every week, the OT/ICS vulnerabilities that matter, with context and suggested actions for plant and industrial leaders.
Subscribe
The historian as a gateway: hardcoded credentials in the power grid's openHistorian
The October 13th edition analyzes a recurring problem in industrial networks: legacy components, experimental implementations, and infrastructure equipment that remain active without sufficient visibility. Key cases include remote code execution and hardcoded credentials in openPDC/openHistorian, six vulnerabilities in RTU500 units with unsupported firmware, flaws in N-Tron 700 industrial…
ActiveMQ vulnerability in Armatura One: an exploited CVE reaches physical access control
The October 6th edition analyzes critical vulnerabilities affecting components close to physical operations. The main case is Armatura One, an access control platform that incorporates a vulnerable version of Apache ActiveMQ associated with active exploitation and ransomware campaigns. Also reviewed are ten flaws in Toptech TMS7 and TopHAT, a remote code execution in MikroTik RouterOS, and…
Two critical flaws in lwIP expose an OT inventory blind spot
Two vulnerabilities in lwIP highlight embedded dependencies that rarely appear in OT inventories. This edition also reviews critical flaws in Siemens Industrial Edge Management and Siveillance Control, as well as relevant vulnerabilities in ABB and Lenze products.
Get Perímetro in your inbox
Every week, the OT/ICS vulnerabilities that matter, with context and suggested actions for plant leaders. No spam; unsubscribe in one click.