Multiple Vulnerabilities in Honeywell VirtualUOC Let Attackers Execute Remote Code

From gbhackers.com

Team82 has uncovered multiple critical vulnerabilities in Honeywell’s ControlEdge Virtual Unit Operations Center (UOC).

These vulnerabilities within the EpicMo protocol implementation could potentially allow attackers to execute remote code without authentication.

Honeywell has since addressed these issues, but the discovery underscores the ongoing challenges in securing industrial control systems (ICS).

Read more…