A critical vulnerability was uncovered in Real-Time Automation’s (RTA) 499ES EtherNet/IP (ENIP) stack could open up industrial control systems to remote attacks by adversaries. The flaw is rated 9.8 out of 10 in severity by the industry-standard Common Vulnerability Scoring System. There are currently more than 8,000 ENIP-compatible internet-facing devices, according to a search on Shodan.io. RTA removed the attackable code from its software as early as 2012, but many vendors may have bought vulnerable versions of this stack before the 2012 update.
Source: https://thehackernews.com/2020/11/researchers-warn-of-critical-flaws.html