ABB Cylon FLXeon: Default Passwords Leave Smart Buildings Vulnerable!
ABB Cylon FLXeon controllers are a marvel of modern building automation, except when they hand over the keys to the castle with weak default credentials. Hackers could have a field day, turning your smart building into a smart-alec. Time to change those passwords before your HVAC starts throwing its own house party!
Hot Take:
In an era where passwords are as precious as gold, ABB decided to go with the “password123” approach for their FLXeon series. It’s like leaving your front door wide open with a “Welcome!” mat that hackers absolutely adore. Well, at least they’re keeping the cybercriminals employed!
Key Points:
- ABB Cylon FLXeon controllers have default credentials that are weak and easily guessable.
- These credentials can be exploited in remote password attacks to gain system control.
- The affected series includes FLXeon, CBX, CBT, CBV, and UC32.
- The vulnerability was discovered by Gjoko ‘LiquidWorm’ Krstic from Zero Science Lab.
- The issue affects firmware version 9.3.4 and earlier.
Already a member? Log in here