A recent study reveals that 548 internet-connected building automation devices near U.S This article explores bacnet controllers niagara. . These affected devices are part of three legacy product lines: Tridium NiagaraAX 3.x, Trane Tracer SC, and Carrier WebCTRL version 7.0.
These platforms manage systems like HVAC, cooling, power monitoring, and environmental controls in data centers. The discovery stems from a broader examination of industrial control system (ICS) and building automation system (BAS) devices near over 1,000 U.S. Researchers identified 6,300 high-confidence internet-accessible devices, including BACnet controllers, Niagara platforms, programmable logic controllers, and power-management interfaces. The filtering process: five layers of validation narrowed down the initial results to 6,300 confirmed ICS devices (8.5% of raw data).
The dataset also included 237 Delta Controls enteliBUS controllers vulnerable to CVE-2019-9569, an unauthenticated remote code execution flaw involving crafted BACnet traffic. A compromised BAS device could enable an attacker to alter temperature or humidity settings, disable cooling equipment, disrupt alarms, or lock out facility personnel, thereby posing significant risks for data centers where power failures can quickly trigger thermal alerts and service disruptions. Systems from vendors such as Vertiv and Liebert are particularly important due to their precision cooling capabilities, uninterruptible power supply management, and power distribution features.
Utilize ANY.RUN's in-browser data inspection tool to detect, investigate, and respond more swiftly, enhancing your SOC and reducing Mean Time To Repair (MTTR).
