ICS Targeting Via Web-Enabled Input/Output Controllers

This report from Cyble Research & Intelligence describes high-severity web vulnerabilities (CVSS 9.1) in Control by Web X-400/X-600M and numerous WebRelay devices exposed on the internet—many still using factory-default credentials—enabling remote code/script manipulation and relay control that can disrupt industrial control systems, create safety hazards, and impede investigations; the report provides exposure counts by product/region, impact scenarios across critical infrastructure sectors, evidence of active scanning, and prioritized mitigations (patching, segmentation, strong passwords, audits).