Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot.Node-RED is commonly used for workflow automation in industrial control systems (ICS) and operational technology (OT) environments. It’s built on top of Node.js and is used in commercial products including Siemens SIMATIC IoT2050. In Augus…
VulnCheck recorded attacks that take advantage of a maximum severity failure in Node-RED to deliver a Linux bot. Risk increases when the programming interface is accessible from the internet, especially in industrial environments.