SecurityWeek reports that seven vulnerabilities within the open-source industrial automation platform Rapid SCADA used in monitoring and control system development continue to be unaddressed despite being reported by Claroty researchers in July, placing sensitive industrial systems at risk. Threat actors could leverage the flaws, which include one critical and two high-severity issues, to compromise sensitive files and administrator passwords, while facilitating privilege escalation and arbitrary code execution, according to an advisory from the Cybersecurity and Infrastructure Security Agency, whose attempts to communicate the vulnerabilities to Rapid SCADA developers were also ignored.

Source: SC Magazine