Our IPS team wins once more, with new exclusive signatures for the ICS world

[Shlomi_Feldman]

About 10 days ago the US-DHS and US-NIST published the following medium range vulnerability related to Rockwell automation PLCs. https://nvd.nist.gov/vuln/detail/CVE-2019-10955
https://ics-cert.us-cert.gov/advisories/ICSA-19-113-01

Vulnerability details: the vulnerability could allow a remote unauthenticated attacker to input a malicious link to redirect users to a malicious site that could run or download arbitrary malware on the user’s machine.

in this short period of time, our team managed to investigate and to develop an IPS protection  which is capable to prevent an attack exploiting this vulnerability. The protection was released today and at the moment none of our competitors obtain equivalent protection for this vulnerability.