writeups.xyz / Hacking a Secure Industrial Remote Access Gateway

Submitter : c2a

Date: 12 July 2024

Bounty : undisclosed

Vulnerabilities :

• OS Command Injection
• XSS
• Hardcoded Secrets
• Industrial System (OT)

Programs :

• HMS (Ewon Cosy+)

Authors :

• Moritz Abrell (@Moritz_abrell)

Link :
https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/