Wärtsilä FOS-Onboard
Plan PatchCVSS 9.1ICS-CERT ICSA-26-258-02Sep 15, 2026
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
FOS-Onboard contains vulnerabilities (CWE-321) that could allow an attacker to deliver an unauthorized update, execute code, or extract credentials to impersonate a privileged client. Successful exploitation could compromise the integrity and confidentiality of the system. Wärtsilä states the vulnerabilities are not exploitable when the product is installed as recommended and has developed a security patch.
What this means
What could happen
An attacker could inject malicious updates, run arbitrary code on the FOS-Onboard system, or steal credentials to gain privileged access, potentially allowing them to modify marine propulsion system configurations, engine parameters, or operational controls.
Who's at risk
Marine vessel operators and shipowners using Wärtsilä FOS-Onboard propulsion management systems. This affects ships with integrated fuel optimization and engine control systems, including container ships, bulk carriers, tankers, and other commercial vessels.
How it could be exploited
An attacker with network access to FOS-Onboard could exploit cryptographic weaknesses (CWE-321) to bypass authentication mechanisms, deliver unauthorized firmware updates, or extract stored credentials. The attacker could then use stolen credentials to impersonate an authorized operator or engineering workstation.
Prerequisites
- Network access to FOS-Onboard system port 443 or management interface
- Ability to intercept or manipulate unencrypted or weakly encrypted communications
- Product must not be installed with all recommended security hardening measures in place
Remotely exploitableNo authentication required for initial exploitationLow complexity attackCryptographic weakness (CWE-321)Could allow code execution and credential theft
Exploitability
Unlikely to be exploited — EPSS score 0.6%
Affected products (1)
ProductAffected VersionsFix Status
FOS-Onboard: 5.07.0923.015.07.0923.01No fix yet
Remediation & Mitigation
0/3
Do now
0/2HARDENINGVerify FOS-Onboard is installed with all recommended hardening measures (Wärtsilä states vulnerabilities are not exploitable when installed as recommended)
HARDENINGRestrict network access to FOS-Onboard management interfaces to authorized engineering workstations and control systems only
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXContact Wärtsilä to obtain and install the security patch for FOS-Onboard
CVEs (2)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/df5c43a7-2f02-4696-951a-64ba4fe64cb2Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.