Industrial Controllers Still Vulnerable to Stuxnet-Style Attacks

guest · May 7, 2020

Another Stuxnet-Style Vulnerability Found in Schneider Electric Software
May 7, 2020
https://www.securityweek.com/another-stuxnet-style-vulnerability-found-schneider-electric-software

Stuxnet, the malware used a decade ago by the United States and Israel to cause damage to Iran’s nuclear program, was designed to target Siemens’ SIMATIC S7-300 and S7-400 programmable logic controllers (PLCs). The malware loaded malicious code onto targeted PLCs by replacing a DLL file associated with the Siemens STEP7 controller programming software.

In March, Airbus Cybersecurity reported that it had identified a similar vulnerability in Schneider Electric’s EcoStruxure Control Expert engineering software, formerly known as Unity Pro.
Researchers at cybersecurity firm Trustwave reported on Thursday that they too have identified a similar vulnerability in Schneider software, specifically EcoStruxure Machine Expert [...]
Click to expand...

Trustwave researchers also made an interesting discovery related to an old vulnerability affecting Schneider Electric software.

“While this replay vulnerability was patched in 2017, Trustwave discovered that the attack could still be performed as long as the attacker was piggybacking on top of an existing session between the control software and the PLC. In other words, while the packet replay vulnerability was patched, a man-in-the-middle attack could still be performed accomplishing the same misuse of the PLC.”
Click to expand...

Industrial Controllers Still Vulnerable to Stuxnet-Style Attacks (March 31, 2020)

Log in or Sign up

Industrial Controllers Still Vulnerable to Stuxnet-Style Attacks

guest Guest

Log in or Sign up

Industrial Controllers Still Vulnerable to Stuxnet-Style Attacks

guest Guest

Useful Searches