Author
thanhlocpanda
Senior Security Researcher
Leads Unit 515 research on industrial controllers and network infrastructure, from firmware teardown to coordinated disclosure with vendors.
Research by thanhlocpanda
4 publications
From a lobby account to a switch that will not boot: four Catalyst 9300 CVEs
A low-privilege web account on an enterprise access switch can climb one privilege level and then push the device into maintenance mode, where it may need someone on site to recover it.thanhlocpandaOPSWAT Unit 5151 min readPersistent DoSCVE-2026-20110Reading internal files from a PLC's embedded web server
Crafted requests to the web server of a widely deployed PLC return files that should never leave the controller, without any authentication.thanhlocpandaOPSWAT Unit 5151 min readUnauthenticated file accessCVE-2025-2875When an AI agent trusts the tool description more than the user
Agents read tool descriptions as instructions. We show how a poisoned description in a shared tool server steers an agent, and how to review tools before you connect them.Instruction injectionWhen a USB stick types faster than you do
A device that enumerates as a keyboard needs no exploit and no driver bug. We walk through how keystroke injection works, rebuild it on a lab bench, and show which controls actually stop it.thanhlocpandaOPSWAT Unit 5152 min readKeystroke injection
