Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication

Summary: Cisco Talos disclosed eight vulnerabilities on Sept. 5 in the engine configuration functionality of Open Automation's Software Platform, which connects PLCs, servers, files, databases and IoT platforms across industrial and enterprise environments. Three of the flaws (CVE-2023-35124, CVE-2023-34353, CVE-2023-32271) can disclose or decrypt sensitive information, two (CVE-2023-31242, CVE-2023-34998) can give an adversary system access via specially crafted network requests, and the remaining flaws chain together to authenticate, overwrite or create files, and create directories anywhere the underlying OAS account has access.
What's compelling: These flaws chain: an attacker who lands the authentication bugs can move on to file overwrite and directory creation under the logged-in OAS account, so a single entry point reaches the configuration data that gets installed on other devices. Talos worked with Open Automation on an update, and Snort coverage for detection is available under SIDs 61991-61994, 62003 and 62004.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-31242 CVE-2023-32271 CVE-2023-32615 CVE-2023-34317 CVE-2023-34353 CVE-2023-34994 CVE-2023-34998 CVE-2023-35124
Related: OAS Engine Deep Dive: Abusing low-impact vulnerabilities to escalate privileges Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026