This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Shlomi_Feldman
Employee Alumnus
Employee Alumnus
‎2019-08-25 10:09 PM

short Quiz

anyone got a clue, what is the sever vulnerability of the PLC in the image?

 

 
Preview file
44 KB
0 Kudos
2 Replies
Wolfgang
Authority
Authority
‎2019-08-26 02:15 AM

I believe, there is no username / password needed if services like HTTP, FTP are enabled on the device.

AccessControl is possible only by IP-address and this is not real problem to fake.

Wolfgang

0 Kudos
Shlomi_Feldman
Employee Alumnus
Employee Alumnus
‎2019-08-26 03:28 AM
In response to Wolfgang

you are close.

this PLC is old and full of known documented vulnerabilities. however this is not the issue.

Someone ever thought what is the operating system of this PLC? did you know that this PLC is running VxWorks operating system? Schneider electric just recently published this information, due to the fact that 11 different vulnerabilities were discovered to this operating system. The problem with the Momentum is more sever, as the Momentum family reached it end of sale and Schneider electric is not releasing security patches for it. as a result the only way to mitigate these vulnerabilities would be with external tools like our IPS

Upcoming Events

    Sort by:
    CheckMates Events