Published on: 2025-04-11

Intelligence Report: Cyble Urges Critical Vulnerability Fixes Affecting Industrial Systems – Infosecurity Magazine

1. BLUF (Bottom Line Up Front)

Cyble has identified critical vulnerabilities in industrial control systems (ICS) from Rockwell Automation, Hitachi Energy, and Inaba Denki Sangyo. These vulnerabilities, with severity ratings up to a 9.9 CVSS base score, pose significant risks to sectors such as critical manufacturing, energy, and healthcare. Immediate action is recommended to patch these vulnerabilities to prevent potential exploitation and ensure system integrity.

2. Detailed Analysis

The following structured analytic techniques have been applied for this analysis:

General Analysis

The vulnerabilities identified include:

• CVE-2025-23120: Deserialization of untrusted data in Veeam Backup and Replication, affecting Rockwell Automation Industrial Data Center, with a potential for remote code execution (CVSS v3.1 score: 9.9).
• CVE-2025-25211: Weak password requirement in Inaba Denki Sangyo CHOCO TEI WATCHER mini-industrial cameras, allowing unauthorized access (CVSS v3.1 score: 9.8).
• CVE-2025-26689: Forced browsing in Inaba Denki Sangyo CHOCO TEI WATCHER mini-industrial cameras, allowing data tampering (CVSS v3.1 score: 9.8).
• CVE-2024-4872: Improper neutralization of special elements in Hitachi Energy MicroSCADA Pro/X SYS600, allowing code injection (CVSS v3.1 score: 8.8).
• CVE-2024-3980: Path traversal in Hitachi Energy MicroSCADA Pro/X SYS600, allowing file system manipulation (CVSS v3.1 score: 8.8).

These vulnerabilities affect ICS, OT, and SCADA systems, emphasizing the need for enhanced cybersecurity measures.

3. Implications and Strategic Risks

The identified vulnerabilities pose significant risks to national security and economic interests. Exploitation could lead to operational disruptions, data breaches, and unauthorized control of critical infrastructure. The sectors most at risk include critical manufacturing, energy, healthcare, wastewater, and commercial facilities. Failure to address these vulnerabilities could result in severe economic and operational consequences.

4. Recommendations and Outlook

Recommendations:

• Immediate patching of identified vulnerabilities in affected systems.
• Strengthening authentication protocols and access controls.
• Implementing regular security audits and vulnerability assessments.
• Enhancing regulatory frameworks to mandate cybersecurity standards in ICS and SCADA systems.

Outlook:

Best-case scenario: Rapid patch deployment and enhanced security measures prevent exploitation, maintaining system integrity and operational continuity.
Worst-case scenario: Delayed response leads to widespread exploitation, resulting in significant operational disruptions and economic losses.
Most likely scenario: Partial mitigation efforts reduce immediate risks, but ongoing vigilance and updates are required to maintain security.

5. Key Individuals and Entities

The report highlights the following entities: Rockwell Automation, Hitachi Energy, and Inaba Denki Sangyo. These organizations are urged to prioritize cybersecurity measures to protect their systems and stakeholders.