New OT-ISAC advisory exposes critical flaws across industrial control and management systems

A major consolidated advisory has identified systemic vulnerabilities across industrial control layers. Security staff should prioritize patching Horner XL4/XL7 PLCs (logic bypass), AVEVA Pipeline Simulation software (API authorization flaws), and Siemens SINEC NMS management platforms.

Actionable Intelligence: Of particular concern is the “management-plane abuse” trend—attackers are now targeting the systems that manage the network (like SINEC NMS and SCALANCE) rather than just the end devices. Staff are urged to monitor for abnormal BACnet/IP traffic, unauthorized Modbus writes affecting odorant injection/chemical logic, and repeated login failures on Horner engineering workstations