Multiple Vulnerabilities Discovered in a SCADA System
Summary: Unit 42 conducted a security assessment of the ICONICS Suite SCADA system in early 2024 and found five vulnerabilities in versions 10.97.2 and earlier for Windows, which ICONICS addressed with patches and advisories during 2024. The flaws include a GenBroker32 installer that sets the C:\ProgramData\ICONICS directory to Allow-Everyone access, and phantom DLL hijacking paths in components such as MMCfg.exe (loading REVERB1.dll) and MMXCall_in.exe, which on unpatched systems could lead to privilege escalation, denial of service, and in specific circumstances full system compromise.
Key Takeaway: ICONICS Suite has hundreds of thousands of installations across more than 100 countries in critical infrastructure, and Unit 42's internet scan telemetry found several dozen ICONICS servers reachable directly from the public internet.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026