Multiple Vulnerabilities in Industrial Control Systems

Affected Environment
CareCam CM2507 cameras, Siemens Teamcenter and Reyrolle, Schneider SCADAPack, mySCADA, Wärtsilä, and Digital Watchdog DVRs.

Threat Overview
Multiple vulnerabilities enable unauthorized access, remote code execution, authentication bypass, and credential theft across products.

Exposure Timeline
Published via CISA ICS advisories 16 September 2026; fixes available for most affected vendors now.

Attack Surface
Web management interfaces, ONVIF services, physical debug interfaces, and unauthenticated HTTP endpoints on devices.

Technical Root Cause
Missing authentication, hard-coded credentials, insufficient entropy, and cleartext storage of sensitive configuration data.

Exploitation Pathway
Attackers exploit exposed interfaces or weak credentials to gain administrative access or execute arbitrary code.