Conversation

Notices

1. LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} (lnxw48a1)'s status on Wednesday, 13-Apr-2022 20:21:10 UTC LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864}

   Remote profile options...
   https://threatpost.com/zero-click-flaws-ups-critical-infratructure/178810/
   
   Risk that Internet connected UPS devices could be remotely taken over.
   • GeniusMusing (geniusmusing)'s status on Thursday, 14-Apr-2022 00:43:23 UTC GeniusMusing

     Remote profile options...

     in reply to
     >The latest APC Smart-UPS models are controlled through a cloud connection...
     
     Why does everything need to be connected to the cloud?
     
     The most I ever felt was needed was to connect it to a USB port so if during an outage the battery got below 20% it would shut off the server before it lost all power.
     
     >Schneider Electric worked in collaboration with Armis to develop patches for the vulnerabilities, which were distributed to customers and are available on the Schneider Electric website.
     
     So, cloud connected but no auto patching for this kind of thing?
     
     ID10Ts
     LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} repeated this.