A series of 19 different vulnerabilities, four of them critical, are affecting hundreds of millions of internet of things (IoT) and industrial-control devices. The issue is based in the supply chain and code reuse, with the bugs affecting a TCP/IP software library developed by Treck that many manufacturers use. Treck users include one-person boutique shops to Fortune 500 multinational corporations, including HP, Schneider Electric, Intel, Rockwell Automation, Caterpillar, Baxter and Caterpillar. The flaws, dubbed Ripple20, include four remote code-execution vulnerabilities.
Source: https://threatpost.com/millions-connected-devices-ripple20-bugs/156599/