Watchfire
Monthly
Hard-coded shared RSA private keys and their matching X.509 certificates in Watchfire digital billboard controller software (BC550, BC750, BC760, BC760DC) let an attacker who extracts them decrypt and impersonate the controller's built-in HTTPS/TLS web management interface. Because the keys ship in plaintext inside the firmware patch binaries - retrievable from Watchfire's Remote Support filestore - any attacker with the same firmware can recover the identical keys used across all deployed units. This is an information-disclosure/authentication-bypass class flaw (CWE-321) reported through CISA ICS-CERT; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Hard-coded shared RSA private keys and their matching X.509 certificates in Watchfire digital billboard controller software (BC550, BC750, BC760, BC760DC) let an attacker who extracts them decrypt and impersonate the controller's built-in HTTPS/TLS web management interface. Because the keys ship in plaintext inside the firmware patch binaries - retrievable from Watchfire's Remote Support filestore - any attacker with the same firmware can recover the identical keys used across all deployed units. This is an information-disclosure/authentication-bypass class flaw (CWE-321) reported through CISA ICS-CERT; no public exploit identified at time of analysis and it is not listed in CISA KEV.