Seven Years Later, Scores of EAS Systems sit Un-patched, Vulnerable

Security researchers found that roughly 55 Monroe/Digital Alert Systems DASDEC EAS units remain exposed on the Internet and continue to use a shared root SSH key disclosed in 2013, enabling remote root access and potential manipulation of emergency broadcasts; the vendor has issued patches but many customers have not applied them, creating a persistent public-safety risk.