Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

Two trivial but critical security holes have been found in Optigo's Spectra Aggregation Switch, and so far no patch is available. The vulnerabilities, both with CVSS v4 severity scores of 9.3, can be abused by a remote attacker to inject malware into the OT network management switches if they are running version 1.3.7 and …

[Androgynous Cow Herd]

HAPPY CYBERSECURITY MONTH!!

have some cake!

[diodesign]

Re: HAPPY CYBERSECURITY MONTH!!

Every month should be cybersecurity month

C.

[Yorick Hunt]

Why?

Why was PHP used at all, in an appliance?

[A random security guy]

Re: Why?

To most HW manufacturers, software is an afterthought. They probably got the lowest common denominator of UX designer, software implementor, and QA for the interface.