Our takeCISA reports active exploitation of four vulnerabilities in ANDRITZ HIPASE-250 and 250 SCALA <=7.20 that let attackers read device data or reach workstations. Update immediately if you run these systems.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update ANDRITZ HIPASE-250 and 250 SCALA to a version newer than 7.20 if you operate these systems; successful exploitation allows data reads or workstation access.
What this means for you — Lean IT orgs:If you run ANDRITZ HIPASE-250 or 250 SCALA equipment, check the version and update past 7.20; most lean teams without dedicated OT systems can ignore this.
What this means for you — MSP:Check client environments for ANDRITZ HIPASE-250 or 250 SCALA <=7.20 and patch to a newer version; exploitation can lead to data exposure or workstation compromise.
What this means for you — Researcher:CISA reports active exploitation of four vulnerabilities in ANDRITZ HIPASE-250 and 250 SCALA <=7.20 that can allow data reads or workstation access; update immediately where deployed.