Act today Critical Patch available
Fourteen new flaws found in Dixell refrigeration supervision system
CyberScoopDixell, Copeland · food retail
What happened. VulnCheck published 14 flaws in Dixell XWEB EVO, made by Copeland. Each would give an attacker administrative access. At least two are exploited in the wild. XWEB was among systems hit in the October attack on 700 French supermarkets.
Who is affected. Operators of Dixell and Copeland XWEB EVO supervision systems, including food retail refrigeration in the US and Europe.
What to do. Check whether you run Dixell or Copeland XWEB EVO supervision systems and restrict access to them, starting with any that are reachable from the internet.
When to act. Act today: Refrigeration and food retail operators: check XWEB EVO supervision systems and remote exposure today.
Editor's reading
Forasset ownerOT security leadvendor/integrator
- Purdue level
- L2
- L1
Why: XWEB EVO is a supervision system (L2) that manages refrigeration controllers (L1) at each site.
- Are you exposed?
Check your asset inventory and internet-facing addresses for Dixell or Copeland XWEB EVO units, and whether their web interface is reachable from outside.
- If you cannot fix it yet
- Take XWEB EVO units off the internet and place them behind a firewall.
- Allow access to the supervision system only from named management hosts, over a VPN with multi-factor authentication.
- Watch for
- Look for logons or administrative changes on XWEB EVO units from unfamiliar addresses.
- Watch for unexpected changes to refrigeration setpoints or alarm settings.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CyberScoop (opens cyberscoop.com)
More on Dixell Copeland Food and agriculture