Will Rockwell Automation OTTO Fleet Manager weak password hashing be actively exploited by Sept 2026?

CISA has alerted to a vulnerability in Rockwell Automation OTTO Fleet Manager ≤V2.3 that reduces computational cost for offline brute-force attacks against password hashes. No open market currently covers exploitation of this specific ICS vulnerability.

Resolution Criteria

Public documentation from CISA KEV, vendor advisories, or security researchers confirming active exploitation (successful brute-force attacks, credential compromise, or malware samples) of Rockwell OTTO Fleet Manager password hash weakness before Sept 30, 2026.