Critical vulnerabilities found in cloud-based ICS management systems

guest · Jul 21, 2021

Critical vulnerabilities found in cloud-based ICS management systems
July 21, 2021
https://betanews.com/2021/07/21/vulnerabilities-cloud-based-ics/

There are lots of good reasons for moving industrial control systems to the cloud including better telemetry and analysis of device performance, management of logic and remote device configuration, improved diagnostics and troubleshooting, a centralized view of processes.

But as more operational technology and lCS make the move, they become increasingly vulnerable to threats. ICS security specialist Claroty has unveiled its new Team82 research arm along with a report on critical vulnerabilities found in cloud-based management platforms for ICS.
Click to expand...

"Team82's latest research was motivated by the reality that organizations in the Industry 4.0 era are incorporating cloud technology into their OT and IIoT for simplified management, better business continuity, and improved performance analytics," says Amir Preminger, VP research at Claroty.

You can get the full report on the Claroty site and find out more about Team82's work on its Research Hub.
Click to expand...

Claroty: Top-Down and Bottom-Up: Exploiting Vulnerabilities In the OT Cloud Era

Executive Summary

Claroty’s Team82 has researched the exploitability of cloud-based management platforms responsible for monitoring and configuring industrial control systems (ICS).

The momentum of adopting cloud for industrial control systems (ICS) is undeniable, motivating Team82 to examine the security of these platforms and architectures.

Team82 developed techniques to exploit vulnerabilities in automation vendor CODESYS’s Automation Server through two unique attack vectors.

The research also included the discovery of vulnerabilities in the WAGO PLC platform and the development of a complex exploit chain to attack a single cloud-managed PLC and eventually take over the cloud-based host account.

All of the vulnerabilities found and disclosed by Team82 have been fixed or mitigated by CODESYS and WAGO. Please reference the table below.

Click to expand...

Log in or Sign up

Critical vulnerabilities found in cloud-based ICS management systems

guest Guest

Log in or Sign up

Critical vulnerabilities found in cloud-based ICS management systems

guest Guest

Useful Searches