On Wednesday, cybersecurity researchers disclosed 14 vulnerabilities that affect a common TCP/IP stack, which is used in a large amount of OT devices. These devices are manufactured by less than 200 vendors and utilised in manufacturing plants, power generation, water treatment and critical infrastructure sectors. The vulnerabilities have been labelled “INFRA:HALT” and target NicheStack. If exploited, they could allow attackers to accomplish remote code execution, denial of service, information leaks, TCP spoofing as well as DNS cache poisoning.
