More vulnerabilities found in SCADA systems
Italian security specialist Luigi Auriemma, who in March this year exposed 35 vulnerabilities in SCADA (Supervisory Control And Data Acquisition) products from Siemens and others, has now released another set of 13 vulnerabilities, together with exploit code as proof-of-concept, affecting eight different SCADA products. His findings have prompted the release of security advisories from the US Department of Homeland Security's ICS-CERT.
The new advisories cover: Beckhoff TwinCAT 2.11.0.2004, Rockwell RSLogix 19, Measuresoft ScadaPro 4.0.0, Cogent DataHub 7.1.1.63 and Azeotech DAQFactory 5.85. Auriemma also finds vulnerabilities in Progea Movicon 11.2.1085 and Carel PlantVisor 2.4.4. Some of his advisories point to possible Denial-of-Service (DoS) or remote code execution as possible dangers. The programs listed are used in a variety of industries, including various utilities, manufacturing systems and by financial institutions.
See also:
- Another zero-day exploit for SCADA systems, a report from The H.
(ehe)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
