Hard-coded key vulnerability in Logix PLCs has severity score of 10 out of 10
Found on Ars Technica on Thursday, 11 March 2021
On Thursday, the US Cybersecurity & Infrastructure Security Administration warned of a critical vulnerability that could allow hackers to remotely connect to Logix controllers and from there alter their configuration or application code. The vulnerability requires a low skill level to be exploited, CISA said.
Hopefully those systems are connected to the Internet.