Microsoft finds vulnerabilities it says could be used to shut down power plants
High-severity vulnerabilities in CODESYS V3 software development kit used in industrial facilities.
Key points:
- Microsoft disclosed 15 high-severity vulnerabilities in CODESYS V3, used to program operational devices in industrial facilities.
- Exploiting the vulnerabilities is difficult but can lead to code execution, denial-of-service attacks, and potential damage to targets.
- Patches have been released, but organizations should prioritize installing updates to mitigate the risk.