ST Engineering iDirect iQ-Series Terminals (Update A)

CISA advisory (Update A) discloses multiple high-severity vulnerabilities (CVEs listed, CVSS v3 8.8) in ST Engineering iDirect iQ‑Series Terminals (<=4.5.2.1) that permit unauthenticated disclosure of device identifiers and keys, CSRF-driven remote reboots causing denial-of-service, local privilege escalation via a preconfigured low-privilege account, and exposure of MD5 password hashes enabling offline cracking; devices are widely deployed across critical infrastructure sectors worldwide and mitigation guidance is provided, with no known public exploitation reported.