OAS Engine Deep Dive: Abusing low-impact vulnerabilities to escalate privileges

Summary: Cisco Talos disclosed eight vulnerabilities in Open Automation Software's OAS Engine, five detailed here, and Open Automation Software released fixes in Version 19. Talos showed that low-impact bugs chained together - an unauthenticated default configuration, cleartext privileged traffic, unrestricted config save paths, and unfiltered usernames - can let an attacker reach the underlying system as the OAS service user.
Why it matters: The chain ends with an attacker writing an SSH public key into the OAS user's authorized_keys file and logging in to the host, so a platform that brokers data between proprietary devices becomes a route to the operating system itself.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-31242 CVE-2023-32271 CVE-2023-32615 CVE-2023-34317 CVE-2023-34998
Related: Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026