Flaws in John Deere Systems Show Agriculture's Cyber Risk

guest · Aug 9, 2021

Flaws in John Deere Systems Show Agriculture's Cyber Risk
John Deere, Researchers Spar Over Impact of Vulnerabilities
August 9, 2021
https://www.databreachtoday.com/flaws-in-john-deere-systems-show-agricultures-cyber-risk-a-17240

Numerous vulnerabilities uncovered in tractor manufacturer John Deere's systems underscore the cyber risks that come in tandem with the productivity gains from high-tech farming.

On Friday, an Australian researcher who goes by the nickname Sick Codes remotely presented his latest findings on Sunday at the Def Con security conference in Las Vegas. He's part of an independent security research group called Sakura Samurai, which hunts and responsibly discloses security vulnerabilities.
Click to expand...

Sick Codes and the group found several vulnerabilities in the systems of John Deere, based in Moline, Illinois, that have now been patched. He posted details of those issues on his blog on Sunday.
The findings are serious.

There were two problems that lead to it. First, Sakura Samurai's John Jackson and another researcher, Robert Willis, found a vulnerability in a business process management tool called Pega.
The issues were so bad in combination that Sick Codes and his group stopped probing Deere's systems further.
Click to expand...

Efforts to reach John Deere weren't immediately successful. But in a statement to The Security Ledger, the company denied in broad strokes the findings demonstrated by Sick Codes and downplayed the seriousness.
Click to expand...

Log in or Sign up

Flaws in John Deere Systems Show Agriculture's Cyber Risk

guest Guest

Log in or Sign up

Flaws in John Deere Systems Show Agriculture's Cyber Risk

guest Guest

Useful Searches