The Chinese IoT and video surveillance solutions manufacturer Milesight has reported the active exploitation of certain industrial routers produced by the company that could allow attackers to access sensitive router components. The flaw, tracked as CVE-2023-43261, affects the UR-series 3G/4G/5G industrial cellular routers, and exposes system log files that contain administrator passwords like “‘httpd.log”. The passwords could be identified and easily cracked by unauthenticated threat actors to gain administrative access to the vulnerable devices. Although according to Milesight, only several hundred internet-exposed routers are vulnerable, exploitation could allow attackers to pivot into the Industrial Control System (ICS) networks. This could potentially give them access to “industrial automation, self-service kiosks, traffic lighting, smart grid assets, medical equipment, and retail infrastructure.” A working proof-of-concept (PoC) exploit has been made public by the researcher who identified the flaw. The vulnerability has been patched and CTIX analysts recommend that any administrators responsible for networks leveraging these devices should ensure that they are running the most up-to-date firmware to prevent future exploitation.