Contact

Vulnerability notifications

View detected vulnerabilities and affected software versions.
Model
XWEB EVO – All versions
Description

KIDE informs its customers of a security notice issued by Copeland Controls regarding potential cybersecurity vulnerabilities affecting XWEB monitoring systems.

XWEB EVO devices have reached their End of Service (EoS) status and no longer receive software updates or security patches.

This situation may pose a risk of unauthorized access to refrigeration monitoring and control systems.

What should customers do?

Customers are advised to replace XWEB EVO systems with the XWEB PRO platform, which is currently supported by the manufacturer.

What should be done if immediate replacement is not possible?

Until the replacement is completed, the following security measures should be implemented:

  1. Remove any direct Internet access to the device.
  2. Restrict access to the XWEB system through firewall rules.
  3. Use a VPN connection for any remote access.
  4. Limit access exclusively to authorized personnel.
  5. Review user accounts, refrigeration parameters, and alarm configurations.
  6. Maintain backup copies of the system configuration.

Important

These measures reduce exposure to potential cyberattacks but do not resolve the existing vulnerabilities of a product that is no longer covered by security support.

KIDE recommends planning the replacement of all XWEB EVO devices.

For technical assistance or information regarding replacement alternatives, please contact your usual KIDE technical support service.

Affected software version
All versions