An advisory from the Cybersecurity and Infrastructure Security Agency (CISA), published on October 27, describes four vulnerabilities in EPICS Base. The open-source software is used to monitor and control equipment, including at research facilities and in industrial environments. The EPICS project recommends release 7.0.11 as the fixed version.
Affected installations
The advisory covers versions through 7.0.10. The highest-severity vulnerability has a CVSS score of 9.8. CISA says the flaws could allow a remote attacker to disrupt operations or, under some conditions, execute code. The outcome depends on system configuration and exposure.
EPICS Base exchanges data between control systems and equipment. A vulnerability in this layer can therefore present an operational risk when an interface is reachable from an untrusted network. Advisories describe possible scenarios; they do not prove that every installation is exposed or compromised.
Fixes and threat status
The EPICS project released version 7.0.11 with fixes. Operators should inventory deployed versions, use the CISA advisory to identify affected components and plan an upgrade that fits validation and availability requirements.
At the time of the advisory, CISA was not aware of public exploitation of these vulnerabilities. That absence of reports does not guarantee that no exploitation is taking place. Teams can reduce exposure by restricting network access to control interfaces and monitoring unusual connections.
Priorities for operators
Start by identifying EPICS Base installations, their versions and reachable interfaces. Coordinate upgrades with operations staff, then verify system behavior after the change. In sensitive environments, remote access should use strict controls and appropriate network segmentation.
The connection to Soclyde
Administrative secrets also need careful handling in industrial environments. Soclyde helps teams keep unique passwords in local-first vaults. It does not patch EPICS Base or replace software updates, network segmentation or change controls. Our guide to team password sharing covers complementary practices.
Key points
Four vulnerabilities affect EPICS Base through version 7.0.10. The project recommends release 7.0.11. OT and research teams should check their exposure and apply the fix through their change procedures.
