runZero to join Dragos, creating an industry-transforming security platform backed by $4B Accenture investment. More →

📺 Join us September 16th for the next runZero Hour! Register

Start Free Book Demo

Platform
- Exposure Management Platform
  Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
  
  Total Attack Surface Visibility
  
  Full-Spectrum Exposure Detection
  
  Risk Prioritization & Insights
  
  Compliance, Reporting, & KPIs
  
  Fast Deployment & Scalability
- Asset Fingerprinting & Contextualization
  runZero employs a multi-faceted approach to perform high-fidelity fingerprinting for IT, OT, and IoT assets – no agents or credentials required.
- Integrations
  runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
- Community Edition
  Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.
Secure AI workflows on your terms. Accelerate defense with runZero 5.1

With our latest update, runZero 5.1 introduces AI workflows — including natural language searches, dashboard and report creation, autonomous discovery, and AI-assisted custom integrations. Plus, our native Dragos integration brings deep OT context directly into the runZero platform.

Read the Blog
Solutions
- Solutions
  Gain visibility, control the unknowns, and ensure compliance with confidence.
  
  Incident Response
  
  Unmanaged & Unknowns
  
  Vulnerability Management
  
  Mergers & Acquisitions
  
  Compliance & Insurance
- Regulatory Compliance
  Ensure compliance and stay resilient against evolving cyber threats.
  
  CSRB
  
  DORA
  
  NIST CSF & 800-171
  
  NIS2
  
  NYDFS
  
  PCI DSS
Join us live on September 16th for the next episode of runZero Hour!

Every month, our research team does a deep dive into the ones and zeros behind all things exposure, from new threats and risky devices to the most secretive, silent, and unheard of vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile environments – join us!

Register Now
Resources
- Resource Center
  Dive into a treasure trove of resources to expand your exposure management knowledge.
  
  Reports
  
  Webcasts
  
  Solution Briefs
- runZero Research
  Explore the world of exposure management through the runZero lens.
  
  Research Blogs
  
  Rapid Responses
  
  runZero Hour
- runZero Blog
  See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
- Support Resources
  Everything you need to maximize your experience with the runZero Platform.
  
  Documentation
  
  REST API
  
  Open Source
CxO Brief: Exposure Management for the Modern Attack Surface

GigaOm’s CxO Decision Brief highlights how runZero eliminates blind spots across converged IT, OT, and IoT environments. By uncovering unmanaged assets, EOL systems, and attack paths before exploitation occurs, runZero enables security leaders to transition from reactive patching to proactive exposure management.

Read the Report
Customers
- Our Customers
  Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
- Case Studies
  See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
  
  North Carolina K-12
  
  Topcon
  
  Capgemini
  
  Presidio
  
  York University
- Testimonials
  Read reviews of the runZero Platform and see how teams have improved their security with our technology.
Case Study: How runZero established North Carolina’s K–12 exposure management program

Learn how runZero became the foundation for exposure management across 343 North Carolina Public School Units.

Read the Case Study
Partners
- Infinity Partner Program
  See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
- Partner Directory
  Explore our directory of trusted (and awesome) partners.
- Partner Sign In
  Sign in to our Infinity Partner Portal.
Join our Infinity Partner Program

Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.

Become a runZero Partner
About
- About Us
  Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
- Events
  Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
- Investors
  Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
- Newsroom
  Read the latest articles, announcements, and press releases from runZero.
- Careers
  Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.
Analyst Report: GigaOm Radar for Operational Technology Security

Evaluating security solutions tailored for industrial settings, this report highlights purpose-built capabilities that can be safely deployed in fragile OT environments without disrupting operations. Within this landscape, runZero is recognized as a Challenger and Fast Mover in the Innovation/Platform Play quadrant.

Read the Full Report
Pricing
Support
Contact Us
Sign In

runZero to join Dragos, creating an industry-transforming security platform backed by $4B Accenture investment. More →

📺 Join us September 16th for the next runZero Hour! Register

Exposure Management Platform
Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
Asset Fingerprinting & Contextualization
runZero employs a multi-faceted approach to perform high-fidelity fingerprinting for IT, OT, and IoT assets – no agents or credentials required.
Integrations
runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
Community Edition
Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.

Secure AI workflows on your terms. Accelerate defense with runZero 5.1

With our latest update, runZero 5.1 introduces AI workflows — including natural language searches, dashboard and report creation, autonomous discovery, and AI-assisted custom integrations. Plus, our native Dragos integration brings deep OT context directly into the runZero platform.

Read the Blog

Solutions
Gain visibility, control the unknowns, and ensure compliance with confidence.
Regulatory Compliance
Ensure compliance and stay resilient against evolving cyber threats.
- CSRB
- DORA
- NIST CSF & 800-171
- NIS2
- NYDFS
- PCI DSS

Join us live on September 16th for the next episode of runZero Hour!

Every month, our research team does a deep dive into the ones and zeros behind all things exposure, from new threats and risky devices to the most secretive, silent, and unheard of vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile environments – join us!

Register Now

Resource Center
Dive into a treasure trove of resources to expand your exposure management knowledge.
runZero Research
Explore the world of exposure management through the runZero lens.
runZero Blog
See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
Support Resources
Everything you need to maximize your experience with the runZero Platform.

CxO Brief: Exposure Management for the Modern Attack Surface

GigaOm’s CxO Decision Brief highlights how runZero eliminates blind spots across converged IT, OT, and IoT environments. By uncovering unmanaged assets, EOL systems, and attack paths before exploitation occurs, runZero enables security leaders to transition from reactive patching to proactive exposure management.

Read the Report

Our Customers
Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
Case Studies
See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
Testimonials
Read reviews of the runZero Platform and see how teams have improved their security with our technology.

Case Study: How runZero established North Carolina’s K–12 exposure management program

Learn how runZero became the foundation for exposure management across 343 North Carolina Public School Units.

Read the Case Study

About Us
Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
Events
Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
Investors
Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
Newsroom
Read the latest articles, announcements, and press releases from runZero.
Careers
Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.

Analyst Report: GigaOm Radar for Operational Technology Security

Evaluating security solutions tailored for industrial settings, this report highlights purpose-built capabilities that can be safely deployed in fragile OT environments without disrupting operations. Within this landscape, runZero is recognized as a Challenger and Fast Mover in the Innovation/Platform Play quadrant.

Read the Full Report

Infinity Partner Program
See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
Partner Directory
Explore our directory of trusted (and awesome) partners.
Partner Sign In
Sign in to our Infinity Partner Portal.

Join our Infinity Partner Program

Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.

Become a runZero Partner

On This Page:

Latest AutomationDirect MB-GATEWAY vulnerability
What is the impact?
Are any updates or workarounds available?
How do I find AutomationDirect MB-GATEWAY Modbus gateways with runZero?

How to find AutomationDirect Modbus Gateways on your network

Matthew Kienow

|

Updated May 22, 2025, 6:18pm EDT

Latest AutomationDirect MB-GATEWAY vulnerability #

A vulnerability has been disclosed in AutomationDirect MB-GATEWAY Modbus gateways. This vulnerability in the embedded web server allows unrestricted remote access to the device. This device is no longer supported by the vendor and will not receive updates, including security patches.

This vulnerability has been designated CVE-2025-36535 and has a CVSS score of 10.0 (critical).

What is the impact? #

Successful exploitation of this vulnerability could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality.

Are any updates or workarounds available? #

This device is no longer supported by the vendor and users are encouraged to discontinue their use. If this is not possible, users are strongly recommended to implement network access controls to limit access to these devices to trusted networks.

How do I find AutomationDirect MB-GATEWAY Modbus gateways with runZero? #

From the Asset Inventory, use the following query to locate potentially impacted assets:

hw:="Automation Direct Modbus Gateway"

Written by Matthew Kienow

Matthew Kienow is a software engineer and security researcher. Matthew previously worked on the Recog recognition framework, AttackerKB as well as Metasploit's MSF 5 APIs. He has also designed, built, and successfully deployed many secure software solutions; however, often he enjoys breaking them instead. He has presented his research at various security conferences including DerbyCon, Hack In Paris, and CarolinaCon. His research has been cited by CSO, Threatpost and SC Magazine.

More about Matthew Kienow

Explore more runZero

Product

runZero 5.1 is here: Secure AI workflows, enhanced integrations, and expanded autonomous discovery

runZero 5.1 takes on the heavy lifting across five key areas, enabling you to unmask and remediate exposures with less friction and more speed.

Podcasts

Know Your Adversary with HD Moore

runZero CEO HD Moore breaks down the myth of air-gapped networks, the impact of AI on security, and why asset connectivity is everything.

runZero Perspective

BOD 26-04: A new era of prioritized remediation

A complete breakdown of CISA's BOD 26-04 directive. Learn how the shift to SSVC, risk-based KEV prioritization, and 3-day remediation impacts your...

runZero Perspective

Dawn of the apex agentic adversary

When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...

Webcasts

runZero Hour, Ep. 33: Hacker Summer Camp: we survived the Vegas heat (and the bugs)

In this post-Hacker Summer Camp recap, the runZero team break down the research, tools, and trends discussed at BSides Las Vegas, Black Hat and DEF...

Podcasts

The Internet's biggest point of failure

Join Tod Beardsley on Secure & Scale as he explores the future of vulnerability management, CVE fragmentation, and how AI is changing security...

Webcasts

Mind the gaps: securing the modern IT/OT attack surface

In this webcast, HD Moore and GigaOm Analyst Chris Ray discuss key methods for hardening OT defenses and share insights from the new OT report.

Webcasts

runZero Hour, Ep. 32: AI-pocalypse now? Why the 2026 DBIR is actually good news

In this episode of runZero Hour, Tod Beardsley, Brianna Cluck, and Verizon's Alex Pinto broke down 2026 DBIR trends, AI threats, and runZero 5.0.

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.

Try runZero for Free

runZero CAASM

© Copyright 2026 runZero, Inc. All Rights Reserved