Toptech TMS7 and TopHAT
Plan PatchCVSS 10ICS-CERT ICSA-26-272-02Sep 29, 2026
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
Multiple vulnerabilities in Toptech Systems TMS7 and TopHAT versions 7.6.3 allow remote attackers to access critical data or execute arbitrary code. Affected systems include improper file handling (CWE-552, CWE-434), SQL injection (CWE-89), insufficient access control (CWE-384), code injection (CWE-95), and cross-site scripting (CWE-79). These vulnerabilities can be exploited remotely without authentication or user interaction.
What this means
What could happen
An attacker could gain unauthorized access to critical data stored in your TMS7 or TopHAT systems, or execute arbitrary code on these devices to alter automation logic and process control.
Who's at risk
Water utilities, municipal electric systems, and other critical infrastructure operators using Toptech TMS7 or TopHAT supervisory control systems for SCADA automation and process monitoring.
How it could be exploited
An attacker with network access to TMS7 or TopHAT could exploit one of multiple vulnerabilities (including insecure file upload, SQL injection, and code injection) to bypass authentication and execute commands on the system without valid credentials.
Prerequisites
- Network access to TMS7 or TopHAT management interface or API endpoints
- No credentials required
remotely exploitableno authentication requiredlow complexityhigh CVSS score (10.0)affects supervisory control systems
Exploitability
Unlikely to be exploited — EPSS score 0.4%
Affected products (2)
2 pending
ProductAffected VersionsFix Status
TMS7: 7.6.37.6.3No fix yet
TopHAT: 7.6.37.6.3No fix yet
Remediation & Mitigation
0/4
Do now
0/1HARDENINGRestrict network access to TMS7 and TopHAT management interfaces to trusted engineering workstations and control network segments only
Schedule — requires maintenance window
0/2Patching may require device reboot — plan for process interruption
HOTFIXUpgrade TMS7 to version 7.8 or later
HOTFIXUpgrade TopHAT to version 7.8 or later
Long-term hardening
0/1HARDENINGDisable remote access to TMS7 and TopHAT if not operationally required
CVEs (10)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/49c95f21-f7ff-4978-96f7-16532daeb82bGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.