An unprivileged user can read user-management information. Malformed IEC 60870-5-104 U-frames can disrupt RTU operation, and authenticated REB500 roles can access or alter unauthorized directories; devices are deployed in the energy sector and other critical infrastructure.
Part of the PlainSec briefing for 2026-03-04