# Taking remote control over industrial generators

DevFeed: [Taking remote control over industrial generators](<https://devfeed.tech/articles/taking-remote-control-over-industrial-generators-32614.md>)

Original publisher: [Read original article](<https://eaton-works.com/2025/10/06/industrial-generator-hack/>)

Author: Eaton

Published: 2025-10-06T15:13:20Z

Content type: article

Language: en

Sources: [Eaton Works Feed](<https://devfeed.tech/sources/eaton-works-feed.md>)

Topics: [generators](<https://devfeed.tech/topics/generators.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [API](<https://devfeed.tech/topics/api.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [api-security](<https://devfeed.tech/tags/api-security.md>), [apis](<https://devfeed.tech/tags/apis.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [industrial](<https://devfeed.tech/tags/industrial.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

An industrial generator management platform had insecure APIs that accepted valid user tokens without checking whether the user had administrator privileges. This broken function-level authorization could expose generator data and commands to start or stop generators. The commands were not tested because doing so could have created a safety hazard.

## Source excerpt

Industrial generator smart platform had insecure APIs that could enable remote control by anyone.