Back Scworld

Several flaws found in serial-to-IP converters used in critical sectors | brief

Scworld • April 21, 2026

SecurityWeek reports that Forescout Technologies identified 20 new vulnerabilities in Sliex and Lantronix serial-to-IP converters, or serial device servers, that can be exploited without authentication, potentially exposing healthcare, operational technology , and other systems to remote attacks.

Attackers could weaponize the flaws, which are collectively known as BRIDGE:BREAK, to enable OS command injection, remote code execution, denial-of-service intrusions, firmware tampering, and device hijacking, as well as arbitrary file uploads, authentication evasion, and information gathering, reported Forescout researchers. Actively exploited firmware could prevent serial-to-IP converters from responding on the network.

"Potential impacts include: analyzers stop reporting results to laboratory information systems, creating processing backlogs; surgical lighting controllers become unresponsive to remote commands; infusion pump calibration and certification workflows are halted; telemetry from environmental sensors is interrupted; Patient monitors lose network connectivity," said researchers, who are poised to release more details on the vulnerabilities. Fixes have already been issued by both Lantronix and Silex following Forescout's disclosure.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure Forescout Technologies has identified 22 new vulnerabilities in serial-to-IP converters from Lantronix and Silex, which are widely used in critical sectors like healthcare and utilities. These vulnerabilities, collectively known as BRIDGE:BREAK, can be exploited without authentication, allowing attackers to perform remote code execution, OS command injection, and data tampering. The research highlights the risk posed by insecure edge devices, particularly following a recent cyberattack on Poland's energy grid that exploited similar vulnerabilities. The Cybersecurity and Infrastructure Security Agency (CISA) has issued alerts urging critical infrastructure operators to enhance their cybersecurity measures. The vulnerabilities are particularly concerning as they can disrupt operations and compromise data integrity. Both Lantronix and Silex have issued patches in response to these findings. The vulnerabilities are significant due to the potential for widespread impact across various industries reliant on these devices. 5 sources 78

Extracted Entities

Several flaws found in serial-to-IP converters used in critical sectors | brief

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (4)

Industries (1)

MITRE ATT&CK (1)

Vulnerabilities (1)