[Control Systems] Exemys security advisory (AV22-363)

Number: AV22-363
Date: 30 June 2022

On 30 June 2022 ICS-CERT published an ICS Advisory to highlight a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following product:

• Exemys RME1-AI – firmware version 2.1.6 and prior

Exploitation of this vulnerability could allow an actor to bypass authentication AuthenticationA process or measure used to verify a users identity. .

The Cyber Centre encourages users and administrators to review the provided web link and perform the suggested mitigations.

ICS Advisory (ICSA-22-181-01)