Flaw in Navis WebAccess exposes port authorities to hacking
http://i1-news.softpedia-static.com/images/fitted/340x180/us-ports-targeted-with-zero-day-sql-injection-flaw.png
Aug 23, 2016 16:45 GMT · By Catalin Cimpanu Ports in the US have reported attacks using an SQL injection flaw made public by a hacker known as bRpsd, who released a fully working exploit online without notifying the vendor in advance.
Following these events, ICS-CERT, the US-CERT division in charge of security alerts for industrial control systems (ICS), has issued advisories regarding the vulnerability's existence and the ongoing series of attacks.
The affected application is Navis WebAccess, the Web-based component of the Navis maritime transportation logistics software suite, sold by the Cargotec Corporation.
Full Article