CVE-2026-65313

A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VNC access to affected workstations.

Credits

Duc Anh Nguyen (NTCS OT Penetration Testing Team)
Ta Duc Thien (NTCS OT Penetration Testing Team)

References