[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXWe2RXaum_MfqoC__TcIzp39QShuFm3wKTSjqqZXSG8":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"2b371ae5-c823-43b5-9342-e4dc055e7068","Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers","critical-hvac-and-ups-vulnerabilities-could-let-hackers-disrupt-data-centers-e90e86","Claroty researchers have analyzed the security of Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller. The post Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers appeared first on SecurityWeek.","Claroty researchers identified multiple critical vulnerabilities in Vertiv UPS network cards and Trane Tracer SC+ HVAC controllers widely deployed in data centers. The Vertiv flaws include authentication bypass and remote code execution that can be chained to disrupt power protection systems, while Trane vulnerabilities enable unauthenticated RCE and sensitive data disclosure affecting building management systems. Both vendors have been notified and patches are being developed to address these cyber-physical system risks.","Claroty discovers critical vulnerabilities in Vertiv UPS and Trane HVAC controllers used in data centers.","https:\u002F\u002Fwww.securityweek.com\u002Fcritical-hvac-and-ups-vulnerabilities-could-let-hackers-disrupt-data-centers\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F09\u002FData-center-Cybersecurity-1.jpg","2026-06-10T12:07:58+00:00","2026-06-10T14:00:23.049205+00:00",8,[17,20,22,25,27],{"name":18,"type":19},"Vertiv","vendor",{"name":21,"type":19},"Trane",{"name":23,"type":24},"Vertiv UPS Network Cards","product",{"name":26,"type":24},"Trane Tracer SC+",{"name":28,"type":19},"Claroty","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,28],{"controls":48,"vendors":132},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":79,"name":80,"problem":81,"products":82},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"slug":108,"name":109,"problem":110,"products":111},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[112,117,124],{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":113,"product_name":114,"url":115,"description":116},"tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":118,"vendor_name":28,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",[133],{"slug":118,"name":28,"logo_path":119,"roles":134},[135],"reported_by",{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":148},"critical-infrastructure-vulnerabilities-expose-data-centers-to-cyber-physical-attacks","Critical Infrastructure Vulnerabilities Expose Data Centers to Cyber-Physical Attacks","Researchers discovered critical vulnerabilities in widely-deployed HVAC and UPS systems that could allow attackers to disrupt essential data center operations through authentication bypass and remote code execution. These cyber-physical system flaws demonstrate how operational technology (OT) components often lack basic security controls, creating attack vectors that can cause physical damage or service disruption. The vulnerabilities highlight the critical need for treating industrial control systems and building management systems as high-priority security assets rather than purely operational equipment.",[141,142,143,144,145,146,147],"CIS Control 1","CIS Control 7","CIS Control 12","NIST SP 800-82","NIST CSF ID.AM-1","NIST CSF PR.IP-1","IEC 62443",{}]