Our takeCISA reports active exploitation of four vulnerabilities in EPICS Base <=7.0.10 that can lead to DoS, memory corruption, info disclosure, or arbitrary code execution. Patch if you run this yourself.Security Resilience desk
Sources (2)
- cisa_ics · cisa_ics
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update EPICS Base to a release newer than 7.0.10. The four CVEs allow remote DoS, memory corruption, info disclosure, or arbitrary code execution; CISA lists them as exploited in the wild.
What this means for you — Lean IT orgs:If you run EPICS Base (common in labs and industrial systems), update past version 7.0.10 right away. These flaws let attackers crash systems, steal data, or run code; CISA says they are already being used.
What this means for you — MSP:Check every client running EPICS Base and upgrade any instance at or below 7.0.10. CISA reports active exploitation of the four CVEs that can lead to DoS, memory corruption, information disclosure, or RCE.
What this means for you — Researcher:CISA advisory ICSA-26-300-01 details four CVEs in EPICS Base <=7.0.10 that are actively exploited; impacts include DoS, memory corruption, sensitive data disclosure, and potential arbitrary code execution.