plc.myforum.ro

82ec50 · Junior Joined: 21 Jan 2018 Posts: 7

Hackers Can Use Rogue Engineering Stations to Target Siemens PLCs
https://www.securityweek.com/hackers-can-use-rogue-engineering-stations-target-siemens-plcs
The attack method, which the researchers have dubbed “Rogue7,” is being detailed on Thursday at the Negru Hat cybersecurity conference in Las Vegas. A research paper that includes technical information has also been published.
https://i.blackhat.com/USA-19/Thursday/us-19-Bitan-Rogue7-Rogue-Engineering-Station-Attacks-On-S7-Simatic-PLCs-wp.pdf
Contacted by SecurityWeek, Siemens said it was aware of the research and it plans on releasing product updates to address some of the issues uncovered by the experts. However, the company says its products already contain security features, such as Access Protection, which should mitigate these types of attacks.
“Siemens recommends to activate these protection features and install the products according to Siemens’ operational guidelines published on the Siemens Industrial Security website,” the company said in an emailed statement.
https://www.siemens.com/industrialsecurity
Researchers at South Korea-based NSHC last month revealed that they had found a “zero-day vulnerability” in Siemens S7 PLCs that can be exploited for replay attacks.
https://www.linkedin.com/pulse/siemens-plc-control-replay-attack-scenario-0day-louis-hur/?trackingId=YGPdaWhcThmljx%2BCR9kgLQ%3D%3D
Video Demo Link: https://youtu.be/CyIAtKH5CA0