IoT Gateway: Cyber Security Threats and Issues
Parul Sindhwad, Anurag Chevedra, Faruk Kazi · 2025
Industrial gateway with the Industry 4.0 revolution is a critical component of any modern Industrial Control System (ICS). The disruption of Gateway’s usual operations can cause substantial harm, ranging from little inconvenience to widespread incidents that endanger human lives. To reduce the risks associated with device vulnerabilities, one must define all potential threats and identify the source to prevent sabotage or data loss. This study’s primary contribution is a novel method for finding vulnerabilities in a particular IoT Gateway that are linked with the highest risk and with prospective attack methods that are related to those vulnerabilities. The procedure comprises the following steps: the first stage identifies important vulnerabilities determined by the Common Weakness Enumeration (CWE) and the severity of those problems. The second phase involves determining the Common Vulnerability Exposure (CVE) pertinent to the IoT components. Additionally, the security threats that are posed by industrial communication gateways are investigated in this study. The study uncovered three previously unknown vulnerabilities in the Moxa gateway. We demonstrate how an adversarial user could exploit these vulnerabilities by discovering the device through the Shodan search engine. Based on the learning, we provide security recommendations to help developers incorporate security by design.