Conversation

Notices

1. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Wednesday, 13-Apr-2022 16:21:10 EDT lnxw48a1
   https://threatpost.com/zero-click-flaws-ups-critical-infratructure/178810/
   
   Risk that Internet connected UPS devices could be remotely taken over.
   1. GeniusMusing (geniusmusing@nu.federati.net)'s status on Wednesday, 13-Apr-2022 20:43:23 EDT GeniusMusing

      in reply to
      >The latest APC Smart-UPS models are controlled through a cloud connection...
      
      Why does everything need to be connected to the cloud?
      
      The most I ever felt was needed was to connect it to a USB port so if during an outage the battery got below 20% it would shut off the server before it lost all power.
      
      >Schneider Electric worked in collaboration with Armis to develop patches for the vulnerabilities, which were distributed to customers and are available on the Schneider Electric website.
      
      So, cloud connected but no auto patching for this kind of thing?
      
      ID10Ts