QNX Multiple Vulnerabilities

An attacker could execute arbitrary code on QNX systems running these products, potentially gaining control of industrial control logic, data acquisition systems, or other critical processes.

Water utilities, power distribution facilities, and other critical infrastructure operators using QNX-based automation systems, particularly those running Phrelay for relay control, Phwindows for data logging or visualization, or Phditto for SCADA functions.

An attacker with network access to the affected QNX systems could send crafted inputs that trigger buffer overflows in Phrelay, Phwindows, or Phditto, leading to remote code execution without authentication required.