RLE Nova-Wind Turbine HMI Unsecure Credentials Vulnerability (Update A)

CVEs (1)

Remediations

• ICS-CERT has attempted on multiple occasions to contact the vendor regarding this serious flaw and have according to our vulnerability disclosure policy now produced this advisory. Insecure credential vulnerabilities create a serious risk to asset owners. ICS-CERT strongly recommends ensuring that the impacted product is not connected to the Internet or any network as this vulnerability is remotely exploitable.

Affected Vendors

Affected Products (1)