Vulnerability identifier: #VU22293
Vulnerability risk: High
Exploitation vector: Network
Exploit availability: No
The vulnerability allows a remote attacker to disrupt the primary operations.
The vulnerability exists due to presence of hard-coded credentials in application code. A remote unauthenticated attacker can access the affected system using the hard-coded credentials and influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versions
pCOWeb: A1.5.3 - B1.2.4
Chiller SK 3232-Series: All versions
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?