

OTORIO research finds that wireless IIoT vulnerabilities provide direct linkage to physical equipment - Industrial Cyber #technology #digital #network #network #hardware #Vulnerabilities Industrial Cyber Because wireless IIoT is commonly connected to the internet and the internal OT network, it poses a serious risk to OT environments. The disclosure of wireless IIoT devices and technologies has revealed a significant issue involving the implementation of ‘secure’ remote access to #criticalinfrastructure. These devices are the ideal target for hackers who want to crash physical machinery and cause the most damage to production and facilities. It also highlights exposing devices to man-in-the-middle (MITM) attacks, internal services, and even directly accessing Purdue Model Level 0 devices. The research demonstrates how local attackers can compromise industrial Wi-Fi access points and cellular gateways by targeting the Wi-Fi/cellular channels on-site. OTORIO identified that wireless IIoT devices typically include industrial cellular gateways/routers and industrial Wi-Fi access points.

The research found 38 vulnerabilities in hardware from four vendors, all of which OTORIO examined, some of them under a responsible disclosure process, making this a widespread issue. #OT #cyber and digital #riskmanagement solutions vendor OTORIO revealed Wednesday the presence of #wireless #IIoT vulnerabilities that provide a direct path to internal #OT (operational technology) networks, enabling hackers to bypass the common protection layers in the environments.
