As cited
Copy frozen at (site build).
vulnerabilities
Rockwell Automation OTTO Fleet Manager
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Rockwell Automation OTTO Fleet Manager
Rockwell Automation OTTO Fleet Manager versions 2.36.2 and earlier use insufficient computational effort in bcrypt password hashing, making stored credentials vulnerable to offline brute-force attacks if a system backup is compromised. The vulnerability, CVE-2026-75112, has a CVSS score of 6.8 and requires local or adjacent network access. A patch is available in version 2.36.3, and Rockwell recommends enabling encrypted system backups as an alternative mitigation.
Why it matters: Organizations operating Rockwell Automation OTTO Fleet Manager in critical manufacturing and transportation environments should upgrade to version 2.36.3 immediately or enable encrypted backups, as attackers with access to unencrypted system backups can more easily crack password hashes to gain further system access.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Rockwell Automation OTTO Fleet Manager
Rockwell Automation OTTO Fleet Manager versions 2.36.2 and earlier use insufficient computational effort in bcrypt password hashing, making stored credentials vulnerable to offline brute-force attacks if a system backup is compromised. The vulnerability, CVE-2026-75112, has a CVSS score of 6.8 and requires local or adjacent network access. A patch is available in version 2.36.3, and Rockwell recommends enabling encrypted system backups as an alternative mitigation.
Why it matters: Organizations operating Rockwell Automation OTTO Fleet Manager in critical manufacturing and transportation environments should upgrade to version 2.36.3 immediately or enable encrypted backups, as attackers with access to unencrypted system backups can more easily crack password hashes to gain further system access.
- Source published
- First seen by Cybersecurity Tracker