Gotac — Vulnerabilities & Security Advisories 3

Gotac develops industrial control systems and SCADA solutions for critical infrastructure. Historically, the product has been vulnerable to multiple remote code execution flaws, cross-site scripting, and privilege escalation vulnerabilities, with seven CVEs documented. Security researchers have identified authentication bypass issues and insecure default configurations as recurring problems. In 2022, a critical RCE vulnerability in Gotac's communication module allowed unauthorized attackers to execute arbitrary code on affected systems without authentication. The company has faced criticism for slow patch response times, leaving critical infrastructure exposed to exploitation. Their products remain widely deployed in energy and manufacturing sectors, making security updates particularly urgent.