vulnerability
Haiwell IoT Cloud HMI Gateway
Critical
Summary
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway, version 3.40.1.12. Exploitation could allow an attacker to execute arbitrary OS commands with root privileges, posing a significant risk to critical infrastructure sectors like energy and manufacturing. Haiwell has released a patch (Scada-v3.50.1.19) to address the issue.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data