- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
I believe, there is no username / password needed if services like HTTP, FTP are enabled on the device.
AccessControl is possible only by IP-address and this is not real problem to fake.
Wolfgang
you are close.
this PLC is old and full of known documented vulnerabilities. however this is not the issue.
Someone ever thought what is the operating system of this PLC? did you know that this PLC is running VxWorks operating system? Schneider electric just recently published this information, due to the fact that 11 different vulnerabilities were discovered to this operating system. The problem with the Momentum is more sever, as the Momentum family reached it end of sale and Schneider electric is not releasing security patches for it. as a result the only way to mitigate these vulnerabilities would be with external tools like our IPS
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY