Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
6 IOCs
548 Internet-Exposed Building Automation Devices Run End-of-Life Products With No Future Security Patches
Excerpt
A new security study has found that 548 internet-exposed building automation devices near U.S. data centers are running end-of-life products that will not receive future security patches. The affected devices belong to three legacy product lines: Tridium NiagaraAX 3.x, Trane Tracer SC, and Carrier WebCTRL version 7.0. These platforms are used to manage systems such as HVAC, cooling, power monitoring, and environmental controls. In a data center, a compromise of these systems…
Read the original report →Indicators of Compromise
Open the mindmap →6 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2019-9569 | Medium | Score 51/100 | First seen |
| SHA1 | 06394b013d947c6d03bd17c72c652a09a97f490a | Medium | Score 53/100 | First seen |
| SHA1 | c11e3bde827c108ce9cc68c514abd6b0c7678dad | Medium | Score 53/100 | First seen |
| CVE | CVE-2012-4701 | Medium | Score 51/100 | First seen |
| CVE | CVE-2024-8525 | Medium | Score 51/100 | First seen |
| CVE | CVE-2021-38450 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…