Riello UPS — Vulnerabilities & Security Advisories 4

Riello UPS designs uninterruptible power supply systems for critical infrastructure protection. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, with four CVEs currently documented. Security researchers have identified issues in web interfaces and communication protocols that could allow unauthorized access or system compromise. While no major public incidents have been widely reported, the presence of multiple CVEs indicates potential attack surfaces that require regular patching and network segmentation. Their integration into enterprise environments makes them attractive targets for lateral movement attacks, emphasizing the need for robust security configurations and monitoring.