Multiload Ii
Monthly
Full root compromise of Toptech Systems RCU II+ and Multiload II+ terminal automation controllers is possible because they expose an unauthenticated Target Communications Framework (TCF) debug service on a network-reachable port. Any attacker on the adjacent network segment can connect and gain complete control of the underlying embedded Linux system without credentials. Reported via CISA ICS-CERT (ICSA-26-211-03); no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Full root compromise of Toptech Systems RCU II+ and Multiload II+ terminal automation controllers is possible because they expose an unauthenticated Target Communications Framework (TCF) debug service on a network-reachable port. Any attacker on the adjacent network segment can connect and gain complete control of the underlying embedded Linux system without credentials. Reported via CISA ICS-CERT (ICSA-26-211-03); no public exploit identified at time of analysis, and it is not listed in CISA KEV.