Description
The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire's Remote Support filestore.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Watchfire | BC550 | 12.30 | 12.31 SP1 |
| Watchfire | BC750 | 11.33, 12.35 | 11.34 |
| Watchfire | BC760 | 12.38, 13.00 | 12.41 SP1 |
| Watchfire | BC760DC | 12.39 | 12.41 SP1 |
Advisories 1
- ICSA-26-211-09 Watchfire Controller Software CISA ICS & IT advisories · Jul 30, 2026