Multiple Vulnerabilities in Industrial Control Systems

Affected Environment
ABB KNX Update Tool, igloohome Smart Lock app, MikroTik RouterOS, and multiple Siemens SIMATIC, PLCSIM, Mendix, and Desigo CC products.

Threat Overview
Six vulnerabilities spanning access control, authentication, and memory safety flaws across industrial and building automation products.

Exposure Timeline
Disclosed via CISA ICS advisories 28 to 29 July 2026; several vendors have no fix currently available.

Attack Surface
Physical KNX bus access, mobile app backend calls, exposed router APIs, and network adjacent PLC and building systems.

Technical Root Cause
Missing integrity checks, exposed backend credentials, weak authentication throttling, and an OpenSSL buffer overflow in AEAD parsing.

Exploitation Pathway
Attackers exploit unauthenticated APIs, brute force weak credentials, or craft malicious CMS messages to trigger overflow conditions.