SecurityWeek reports that power grids could be compromised with the exploitation of a critical vulnerability impacting Siemens’ Sicam A8000 CP-8031 and CP-8050 remote terminal units with the CPCI85 firmware used in substations. Threat actors could leverage the flaw, tracked as CVE-2023-28489, to facilitate device takeovers and prompt power grid destabilization that may lead to blackouts as well as backdoor deployment, according to SEC Consult Vulnerability Lab Head Johannes Greil, who was part of the team who identified the now-patched bug.

Read full article on SC Magazine