Firmanet Software and Technology — Vulnerabilities & Security Advisories 3

Firmanet Software and Technology develops industrial control systems and IoT solutions for manufacturing and critical infrastructure. Their products have historically been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with three CVEs currently documented. Security researchers have identified authentication bypass flaws and insecure default configurations in their firmware. While no major public security incidents have been reported, the presence of multiple CVEs suggests potential risks in their software supply chain. Their products' integration with industrial environments increases the potential impact of any discovered vulnerabilities, making security assessments particularly important for their customers.