Motorola MOSCAD SCADA IP Gateway Vulnerabilities

An attacker with network access to the gateway could read sensitive data from the SCADA network, including operator credentials, setpoints, and system configuration. The gateway also lacks CSRF protection, allowing an attacker to trigger unauthorized commands if an authenticated operator visits a malicious website.

Energy utilities operating Motorola MOSCAD SCADA systems should be concerned. The IP Gateway is typically deployed to connect field sensors, RTUs, and PLCs to corporate IT systems or remote monitoring centers. Compromise could expose the entire SCADA network's configuration and operational data.

An attacker on the network containing the IP Gateway could send a crafted request that exploits the dynamic code execution vulnerability to extract SCADA data, or trick an authenticated operator into visiting a malicious website to perform unauthorized SCADA commands via CSRF.