Our takeCISA reports active exploitation of four vulnerabilities in ST Engineering iDirect Evolution iQ-Series terminals <=4.5.2.1 that let attackers pull device info or trigger DoS. Update immediately if you operate these OT terminals.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA reports active exploitation in ST Engineering iDirect iQ-Series terminals (Evolution iQ-Series <=4.5.2.1) that could allow unauthorized device access or denial-of-service. Update to a fixed version immediately if you operate these in production environments.
What this means for you — Lean IT orgs:If you run ST Engineering iDirect iQ-Series satellite terminals, check the firmware version and update to the latest release right away. These flaws let attackers read device data or knock the unit offline.
What this means for you — MSP:Check client environments for any ST Engineering iDirect iQ-Series terminals running Evolution iQ-Series <=4.5.2.1 and push the vendor update; CISA states these are under active exploitation.
What this means for you — Researcher:CISA ICSA-26-183-01 details four vulnerabilities in ST Engineering iDirect iQ-Series terminals (Evolution iQ-Series <=4.5.2.1) with confirmed exploitation in the wild.