PEPPERL+FUCHS CT50-Ex

An attacker could trick a site worker into installing a malicious app on their CT50-Ex device, allowing the attacker to gain administrative access and steal sensitive data from the mobile terminal such as credentials, process data, or engineering information.

Water and electric utility field technicians and engineers who use Pepperl+Fuchs CT50-Ex mobile data terminals (Honeywell-manufactured versions running Android 4.4 or 6.0) for field work, system configuration, or data collection are at risk. Any organization using these devices for SCADA system access, meter reading, or remote troubleshooting should apply this update to prevent credential theft or system data exfiltration.

An attacker distributes a malicious application (e.g., via email or a compromised app source) to a site worker. When the worker installs and uses the app on their CT50-Ex mobile device, the malicious app exploits improper privilege controls to elevate to administrator-level permissions. The attacker then reads sensitive files or credentials stored on the device memory.