Skip to main content

CISA issues alert on Longwatch code injection

Source Decision Insights Threat Desk Published December 2, 2025 Companies 1
Human View Machine View

360th article in the last 90 days, one of 475 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA releases five ICS advisories (Dec 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Industrials / Capital Goods

Our classification, not the publisher's statement. Best suited for, not only for.

Industrial Video & Control's Longwatch video surveillance system contains an improper control of code generation (code injection) vulnerability that can enable remote execution of arbitrary code with elevated privileges.

The issue is classified as IMPROPER CONTROL OF GENERATION OF CODE ('CODE INJECTION') CWE-94 and has been assigned CVE-2025-13658. Affected software is Longwatch: Versions 6.309 to 6.334. The flaw permits unauthenticated Hypertext Transfer Protocol (HTTP) GET requests to an exposed endpoint to execute arbitrary code due to the absence of code signing and execution controls; exploitation results in SYSTEM-level privileges. A Common Vulnerability Scoring System (CVSS) v3.1 base score of 9.8 has been calculated; the CVSS vector string is (Antivirus Software (AV):N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A CVSS v4 base score of 9.3 has been calculated; the CVSS vector string is (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N).

Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain remote code execution with elevated privileges. Exploitation results in SYSTEM-level privileges.

Industrial Video & Control recommends that users running Longwatch versions 6.309 to 6.334 upgrade to version 6.335 or later. Industrial Video & Control has published an advisory with further details. No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.

CISA advises minimizing network exposure for control system devices so they are not accessible from the internet, placing control system networks and remote devices behind firewalls and isolating them from business networks, and using more secure remote access methods such as Virtual Private Networks (VPNs) when remote access is required while recognizing VPNs may have vulnerabilities and should be updated to the most current version available and that a Virtual Private Network (VPN) is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures, notes that organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents, and recommends standard social engineering precautions including not clicking web links or opening attachments in unsolicited email messages and consulting CISA guidance such as Recognizing and Avoiding Email Scams and Avoiding Social Engineering and Phishing Attacks as well as control systems security recommended practices available on the ICS webpage, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Blog post, originally published by CISA at cisa.gov.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-alert-on-longwatch-code-injection/",
        "name": "CISA issues alert on Longwatch code injection",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-alert-on-longwatch-code-injection/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
      "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
    },
    "articleSection": [
      "Cybersecurity",
      "AI infrastructure",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Industrials / Capital Goods"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:07:50-06:00",
    "datePublished": "2025-12-02T11:51:09-07:00",
    "description": "Longwatch vulnerability: Longwatch versions 6.309–6.334 contain a code-injection flaw allowing unauthenticated HTTP GET requests to execute SYSTEM-level code.",
    "headline": "CISA issues alert on Longwatch code injection",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "CISA"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-01"
    },
    "keywords": [
      "Common Vulnerability Scoring System",
      "Social Engineering",
      "Software",
      "Virtual Private Network",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-longwatch-code-injection/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages