Critical HVAC and UPS vulnerabilities could let hackers disrupt data centers

Researchers at cyber-physical systems security firm Claroty have uncovered multiple vulnerabilities in two widely deployed HVAC and UPS products used in data centers, demonstrating how attackers could exploit them to launch disruptive remote attacks.

The researchers targeted network cards designed to provide a network interface for uninterruptible power supply devices made by Vertiv.

“UPSs are heavily used in data centers to maintain operations in the event of a power outage; they also protect systems from power spikes and drops, and enable safe shutdowns,” Claroty noted.

Read more at Security Week