Session Token Exposure in ControlEdge PLC and RTU by Honeywell

CVE-2020-10624

What is CVE-2020-10624?

A vulnerability in Honeywell's ControlEdge PLC and RTU allows unprotected session tokens to be exposed over the network. This can give unauthorized users the potential to gain access to sensitive control data, thereby undermining the integrity and security of industrial control systems. The affected products include multiple versions of ControlEdge PLC and RTU, which must be patched to mitigate possible risks.

References