CISA Alerts on Critical ZLAN ICS Flaws Enabling Full Device Takeover

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Critical ZLAN ICS Vulnerabilities Allowing Device Takeover CISA has issued an alert regarding two critical vulnerabilities in ZLAN Information Technology Co.’s ZLAN5143D industrial communication device, specifically affecting firmware version 1.600. These vulnerabilities, which have a CVSS v3.1 score of 9.8, could allow attackers to gain complete control of the devices by bypassing authentication or resetting passwords remotely. 3 sources 75