Return to Team82 Research

Nexus Podcast: Noam Moshe on APT Attacks vs. OT

March 5th, 2024 / 0 min read

Team82’s extensive research into network attached storage devices and the ubiquitous OPC UA industrial protocol came to a head recently in Las Vegas with a pair of presentations at Black Hat USA and DEF CON.

Stay in the know Get the Team82 Newsletter

Recent Vulnerability Disclosures

CVE-2025-30515

CWE-35 Path Traversal:

011209 Intercom could allow an authenticated attacker to upload arbitrary files to multiple locations within the system.

CyberData recommends users update to v22.0.1

CVSS v3: 9.8
CVE-2025-30183

CWE-522 Insufficiently Protected Credentials:

011209 Intercom does not properly store or protect web server admin credentials.

CyberData recommends users update to v22.0.1

CVSS v3: 7.5
CVE-2025-30507

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'):

011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injections.

CyberData recommends users update to v22.0.1

CVSS v3: 5.3
CVE-2025-26468

CWE-306 Missing Authentication for Critical Function:

011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption.

CyberData recommends users update to v22.0.1

CVSS v3: 7.5
CVE-2025-30184

CWE-288 Authentication Bypass Using an Alternate Path or Channel:

011209 Intercom could allow an unauthenticated user access to the Web Interface through an alternate path.

CyberData recommends users update to v22.0.1

CVSS v3: 9.8