548 Internet-Exposed Building Automation Devices Run End-of-Life Products With No Future Security Patches
Brief
A new security study has found that 548 internet-exposed building automation devices near U. S. data centers are running end-of-life products that will not receive future security patches.
The affected devices belong to three legacy product lines: Tridium NiagaraAX 3. x, Trane Tracer SC, and Carrier WebCTRL version 7.
- These platforms are used to manage systems such as HVAC, cooling, power monitoring, and environmental controls. In a data center, a compromise of these systems could affect the physical infrastructure that keeps servers online.
The finding comes from a wider scan of industrial control system (ICS) and building automation system (BAS) devices located near more than 1,000 U. S. data center locations.