Michael KoerferA critical vulnerability in the device’s Lua runtime — an undocumented function —bypasses all sandboxing restrictions and allows arbitrary OS command execution as root. #icssecurity #ics #otsecurity #lua
Insanitree@OT_MacDonald Took long enough to find. Convenience link for anybody else interested: https://certvde.com/de/advisories/VDE-2025-065/
@Insanitree Thx, have forgotten the link!