New research reveals vulnerabilities in data center equipment with high potential for operational disruption
Source Reddit Cybersecurity
Discussion
Research by Team82 identified critical vulnerabilities in Trane HVAC controllers and Vertiv UPS network cards used in data center environments. These vulnerabilities have a high potential to disrupt data center operations. Both Trane and Vertiv have released security updates to address these issues. No known exploits in the wild have been reported. The vulnerabilities affect equipment integral to data center cooling and power management systems.
r/cybersecurity (opens in a new tab)u/clarotyofficial0 points0 comments
Team82 looked at critical vulnerabilities in cooling controllers and uninterruptible power system network cards prevalent in data center environments. The respective vendors, Trane and Vertiv, have published updates addressing the security issues.
Read the research blogs here:
🔖 https://claroty.com/team82/research/turning-up-the-heat-hacking-trane-hvac-controllers
🔖 https://claroty.com/team82/research/attacking-ups-network-cards-to-take-down-data-centers
Links cited in the discussion
Also discussed in r/cybersecurity
References
- claroty.com/team82/research/turning-up-the-heat-hacking-trane-hvac-controllers (opens in a new tab)
- reddit.com/r/cybersecurity/comments/1u6m83z/new_research_reveals_vulnerabilities_in_data/ (opens in a new tab)
- claroty.com/team82/research/attacking-ups-network-cards-to-take-down-data-centers (opens in a new tab)