Top-Down and Bottom-Up: Exploiting Vulnerabilities In the OT Cloud Era

Claroty Team82 analyzed cloud-based ICS management and disclosed multiple vulnerabilities in CODESYS Automation Server and WAGO PLCs (including pre-auth RCE, CSRF, and package verification flaws), demonstrating chained top-down and bottom-up attacks that could allow an adversary to take over cloud management accounts and deploy malicious logic to PLC fleets; vendors have since patched or mitigated the issues.