This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Shlomi_Feldman
Employee
Employee
‎2019-08-25 10:09 PM

short Quiz

anyone got a clue, what is the sever vulnerability of the PLC in the image?

 

 
Preview file
44 KB
0 Kudos
2 Replies
Wolfgang
Mentor
Mentor
‎2019-08-26 02:15 AM

I believe, there is no username / password needed if services like HTTP, FTP are enabled on the device.

AccessControl is possible only by IP-address and this is not real problem to fake.

Wolfgang

0 Kudos
Shlomi_Feldman
Employee
Employee
‎2019-08-26 03:28 AM
In response to Wolfgang

you are close.

this PLC is old and full of known documented vulnerabilities. however this is not the issue.

Someone ever thought what is the operating system of this PLC? did you know that this PLC is running VxWorks operating system? Schneider electric just recently published this information, due to the fact that 11 different vulnerabilities were discovered to this operating system. The problem with the Momentum is more sever, as the Momentum family reached it end of sale and Schneider electric is not releasing security patches for it. as a result the only way to mitigate these vulnerabilities would be with external tools like our IPS