THE advisory ICSA-26-183-01 from CISA details vulnerabilities in the ST Engineering iDirect iQ-Series Terminals, specifically versions up to 4.5.2.1, which could allow unauthorized access to sensitive device information or lead to denial-of-service conditions. The vulnerabilities include missing authentication for critical functions and Cross-Site Request Forgery (CSRF).
CISA recommends updating the software to version 4.5.2.2 or newer and implementing security measures such as restricting management interfaces, using strong authentication, and monitoring API activities. The advisory highlights the critical sectors affected, including Communications and Defense.