Tycon Systems
Monthly
Missing authorization enforcement in Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior allows low-privilege authenticated users to access restricted endpoints and extract system credentials, device configurations, and raw flash memory contents. Disclosed by CISA ICS-CERT under advisory ICSA-26-246-08, this affects an OT-class DC power monitoring appliance where credential extraction could enable full device takeover. No active exploitation or public proof-of-concept has been identified at time of analysis, but the straightforward exploitation path and ICS context elevate real-world risk.
Remote authentication bypass in Tycon Systems TPDIN-Monitor-WEB2 allows unauthenticated attackers to gain full administrative access by submitting empty credentials. This enables control of power relays, device reboot, and network configuration, potentially causing physical equipment damage. No active exploitation or public exploit has been reported at this time.
Cleartext credential storage in Tycon Systems TPDIN-Monitor-WEB2 web management interface allows authenticated attackers to view system credentials, potentially leading to compromise of other network systems. Affected version is 2.3.9. No active exploitation or public exploit is known, and EPSS indicates a very low probability of exploitation.
Missing authorization enforcement in Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior allows low-privilege authenticated users to access restricted endpoints and extract system credentials, device configurations, and raw flash memory contents. Disclosed by CISA ICS-CERT under advisory ICSA-26-246-08, this affects an OT-class DC power monitoring appliance where credential extraction could enable full device takeover. No active exploitation or public proof-of-concept has been identified at time of analysis, but the straightforward exploitation path and ICS context elevate real-world risk.
Remote authentication bypass in Tycon Systems TPDIN-Monitor-WEB2 allows unauthenticated attackers to gain full administrative access by submitting empty credentials. This enables control of power relays, device reboot, and network configuration, potentially causing physical equipment damage. No active exploitation or public exploit has been reported at this time.
Cleartext credential storage in Tycon Systems TPDIN-Monitor-WEB2 web management interface allows authenticated attackers to view system credentials, potentially leading to compromise of other network systems. Affected version is 2.3.9. No active exploitation or public exploit is known, and EPSS indicates a very low probability of exploitation.