Report by Claroty
State of CPS Security: Data Center Exposures
Key Findings
Nearly 1 in 5 data center CPS assets are one hop away from systems making outbound connections that could provide attackers a pathway to those assets.
40% of building management systems in data centers contain outdated firmware.
Power distribution units in data centers are 41% directly exposed or one hop away from risky connections to the public internet, while HVAC/cooling systems are 32% in the same condition.
More than 80% of OT control systems, power monitoring systems, and IoT systems in data centers communicate over legacy, insecure protocols such as BACnet and MODBUS.
88% of building management systems in data centers are exposed via communication over insecure protocols.
23% of IoT devices in data centers contain known exploited vulnerabilities (KEVs).