Pages

Friday, August 21, 2015

Positive Technologies helps to eliminate critical vulnerabilities in Siemens and Schneider Electric SCADA systems


Ilya Karpov, a Positive Technologies expert, detected vulnerabilities in products intended for building automation systems in various industries — from petrochemical to power plants.

Ilya found a problem related to clear-text password storage in Schneider Electric systems — InTouch Machine Edition 2014 (version 7.1, Service Pack 3, Patch 4) and InduSoft Web Studio (7.1.3.4), as well as in their previous builds. The vulnerability that got the CVE-2015-1009 identifier and 6.4 base mark though cannot be exploited remotely requires only a low-qualified internal attacker.

Schneider Electric specialists recommend users to install new security updates as soon as possible (a patch for InTouch Machine Edition 2014 and a patch for InduSoft Web Studio) and restrict physical access of the personnel to these systems in order to decrease a potential risk of confidential information disclosure by internal attackers.

In July, Siemens issued a special update for the April note, where it thanked Ilya Karpov for detecting a dangerous and easy-to-use vulnerability that was threatening security of quite a few Siemens SIMATIC-based solutions:

  • SIMATIC HMI Basic Panels 2nd Generation — all the versions up to WinCC (TIA Portal) V13 SP1 Upd2;
  • SIMATIC HMI Comfort Panels — all the versions up to WinCC (TIA Portal) V13 SP1 Upd2;
  • SIMATIC WinCC Runtime Advanced — all the versions up to WinCC (TIA Portal) V13 SP1 Upd2;
  • SIMATIC WinCC Runtime Professional — all the versions up to WinCC (TIA Portal) V13 SP1 Upd2;
  • SIMATIC WinCC Runtime Professional — all the versions up to WinCC (TIA Portal) V13 SP1 Upd2;
  • SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal) — all the versions up to WinCC (TIA Portal) V13 SP1 Upd4;
  • SIMATIC HMI Multi Panels (WinCC TIA Portal) — all the versions up to WinCC (TIA Portal) V13 SP1 Upd4;
  • SIMATIC WinCC V7.X — all the versions up to V7.3 Upd4;
  • SIMATIC PCS 7 — all the versions up to V8.1 SP1.

The CVE-2015-2823 error rated 6.8 allows using user password hash function in order to authenticate locally and remotely at the server. You don't even have to know the password.

All necessary tests for security issues detected in Siemens SIMATIC software have been added to the knowledge base of the PT MaxPatrol vulnerability and compliance control management system.

Positive Technologies started to cooperate with leading ICS vendors long ago. The large-scale study “SCADA safety in Numbers” was presented on 2012. A year later, PT experts created Choo Choo Pwn — an up-to-date large-scale railway model, whose components (trains, railroad crossing gates, and traffic lights) are controlled by an ICS based on three real SCADA systems. The model was used for SCADA security contest at Positive Hack Days, the annual international conference on information security.

In 2014, the contest infrastructure was significantly changed to allow detection of zero-day vulnerabilities within a wider range of systems and industrial protocols including: transport, city lighting system, power plants and various robots. The contest’s winner Alisa Shevchenko was thanked by Schneider Electric for the vulnerabilities she identified.  

This year's Choo Choo Pwn was even more realistic: the participants couldn't send a command leading to a failure because the traffic security logic wouldn't let that happen. So, the goal of the challenge was to break the transport security means.

44 comments:

  1. HOW I GET A LEGIT LOAN @ 2% INTEREST RATE
    I was not sure of getting a legit loan lender online But when i could not face my Debt any more, my son was on hospital bed for surgery that involve huge money and i also needed some money to refinance and get a good home then i have to seeks for Assistance from friends and when there was no hope any more i decide to go online to seek a loan and i find VICTORIA LAWSON Loan company (marianlawson@outlook.com) with 2% interest Rate and applied immediately with my details as directed. Within seven Days of my application She wired my loan amount with No hidden charges and i could take care of my son medical bills, Renew my rent bill and pay off my debt. I will advice every loan seeker to contact Victoria Lawson Company with marianlawson@outlook.com For easy and safe transaction.

    *Full Name:_________

    *Address:_________

    *Tell:_________

    *loan amount:_________

    *Loan duration:_________

    *Country:_________

    *Purpose of loan:_________

    *Monthly Income:__________

    *Occupation__________

    *Next of kins :_________

    *Email :_________

    Contact her company Via Email: marianlawson@outlook.com

    ReplyDelete
  2. I have just came to know about minecraft gift code generator download and it is really very easy to get these minecraft codes online.

    ReplyDelete
  3. Well this is a good way to handle it a lot of new resources as this is a good way to have it all.Economics assignment uk

    ReplyDelete
  4. Really appreciate this wonderful post that you have provided for us.Great site and a great topic as well i really get amazed to read this. Its really good.
    Assignment Help

    ReplyDelete
  5. What a great information you shared with us, I am inspired by the method for the stage. It kept joined me regularly. Keep doing awesome. Thanks for sharing this blog article.Assignment Help

    ReplyDelete
  6. Here is a list of significant technological developments, by chronological order and organized by their type and technology just in general that humans have essay writers

    ReplyDelete
  7. I enjoyed over read your blog post.Thanks for telling us these new thoughts these are great having a lot of new ideas.

    homework help online

    ReplyDelete
  8. very enjoyable post! I like to read whole post and good explanation about Siemens and Schneider Electric SCADA systems ..thanks-indian marriage site

    ReplyDelete
  9. Restrict physical access of the personnel to these systems in order to decrease a potential risk of confidential information disclosure by internal attackers. We are offering the world best buy essays service for your comfort.

    ReplyDelete
  10. that is fantastic blog, I will pas this to the other peoples.
    Depreciation Accounting Assignment Help

    ReplyDelete
  11. Writing Illustration Essay
    From your blog, I can learn some new knowledge, I like the valuable information you provide in your articles.

    ReplyDelete
  12. I appreciate your efforts in preparing this post. I really like your blog articles.
    Meta Content Writing Service

    ReplyDelete
  13. Term Paper Writing Services
    Thanks for share that type blog. Many people like that blogs....

    ReplyDelete
  14. Excellent post. This is a very good blog that I will definitively come back
    Accounting Homework Assignment Help

    ReplyDelete
  15. Medical Thesis Writing Service & Medical thesis help Assignment Help & Homework Help - Medical Thesis Writing Service & Medical Thesis Help Introduction Medical Science is among one of the most important fields in our society.
    medical thesis writing help

    ReplyDelete
  16. I am so glad to have a chance to read your wonderful article. I am looking forward to read more of your works and posts. You did a good job! Try to visit my site too and enjoy. Research paper service

    ReplyDelete
  17. I appreciate you and hopping for some more informative posts. Thank you for the information you provide. I had a look to start my own. I like play games Piano Tiles 2 game online, Score Hero game, Dream League Soccer, b612 and descargar b612 gratis, Stick RPG 2. How about you?

    ReplyDelete
  18. Những con Macaron người từ dân lao động, buffet dân công sở vịt nấu chao ngon cho đến học sinh, món ngon cuối tuần sài gòn sinh viên,…Kem người ngồi trên Tiramisu yên xe khoai tây chiên còn tay cầm chiếc ly (cốc) xì xụp ăn Bánh rán Doremon một cách ngon lành đã trở thành hình ảnh quen thuộc ở mảnh đất Sài Gòn. Ăn chè, các loại chè ngon sinh tố, há cảo uống sâm, lẩu gà ngon dừa tắc... bánh canh bằng ly là lẽ đương nhiên, quán vịt nấu chao ngon ở sài gòn nhưng với người Sài Gòn,món ngon đãi khách các món mặn món ăn hàn quốc cũng được giản tiện để giải quyết gỏi đu đủ bò khô cơn đói trong tích tắc. panna cotta Đó là hình ảnh thật đẹp Cánh gà chiên nước mắm đối với riêng tôi, bởi nó không chỉ là sự tiện lợi trong cách ăn mà còn thể hiện sự đơn giản, phóng khoáng, vốn không câu kệ tiểu tiết của người miền Nam.


    ReplyDelete
  19. Tí Nị Shop là dịch vụ chuyên về gối in hình,
    in hình lên khung ảnh,
    in hình lên lót chuột,
    in hình lên ly sứ,làm tranh ghép hình cá nhân. Ng
    Đây là món quà cực độc đáo, sáng tạo cho bạn bè, người thân! Ngoài ra chúng tôi còn cung cấp một số sản phẩm về sua ong chua, tac dung cua mat ong,
    cach lam sua chua cach ngam sau
    cach ngam mo duong
    cach trang diem nhe nhang

    ReplyDelete
  20. Thanks for sharing your info. I really appreciate your efforts and I will be waiting for your further write
    Papa Louie 2 | Trollface Quest 2| Dr Driving|Square Quick

    ReplyDelete
  21. Get professional and informative dissertations done custom essay by our specialists. They ensure all instructions and guidelines are accurately followed.

    ReplyDelete
  22. مع شركة اركان المملكه انت فى ايدى امينه لاننا بكل امان وحرفيه فى كافه المجالات الحديثه والعصريه
    شركة كشف تسربات المياه بجازان
    لدينا الخبره الكبيره فى مجال كشف التسربات اليوميه والتى من الافضل الاهتمام الكامل والشامل بها
    شركة نقل اثاث بجازان
    هكذا نحن معك دائما فى مجال التسليك والمكافحه فى كل وقت وكل مكان ندعمك بكل جهد
    شركة تسليك مجارى بجازان
    وايضا فى مدينه نجران لسنا الوحيدون ولكننا متميزون عن غيرنا فى كافه المجالات
    شركة تسليك مجارى بنجران
    ولدينا الخبره الطويله فى رش المبيدات والمكافحه بكل وقت وكل مكان
    شركة رش مبيدات بجازان
    ولدينا ايضا باع طويل فى المقاولات لاننا شركة متماسكه ولها الافضليه الكبيره فى هذا المجال
    شركة مقاولات بجازان
    نتعامل باقل الاسعار الممكنه والمتاحه لدى العميل والوصول الى الدقه الكامله

    ReplyDelete
  23. This content is written very well. Your use of formatting when making your points makes your observations very clear and easy to understand. Thank you this content is written very well. Your use of formatting when making your points makes your observations very clear and easy to understand. Thank you
    Assignment Help

    ReplyDelete
  24. Fifty percent of all meaningful education takes place in the home. What do you share with your child? You share your interests. I was a book person. I read with my son. My wife is an artist. She dragged his little butt around to museums. He's an illustrator of children's books.
    youravon

    ReplyDelete
  25. you made some clear points there very interesting details great delivery topic.
    Assignment Help

    ReplyDelete
  26. HOW I GOT MY LOAN FROM THIS GREAT COMPANY

    Hello my dear people , I am Anita Frank, currently living in New jersey city, USA. I am a widow at the moment with three kids and i was stuck in a financial situation in April 2015 and i needed to refinance and pay my bills. I tried seeking loans from various loan firms both private and corporate but never with success, and most banks declined my credit ,do not full prey to those hoodlums at there that call them self money lender they are all scam , all they want is your money and you well not hear from them again they have done it to me twice before I met Mr. Wilson Edwards the most interesting part of it is that my loan was transfer to me within 74hours so I will advice you to contact Mr. Edwards if you are interested in getting loan and you are sure you can pay him back on time you can contact him via email……… (wilsonedwardsloancompany@gmail.com) No credit check, no co signer with just 2% interest rate and better repayment plans and schedule if you must contact any firm with reference to securing a loan without collateral then contact Mr. Wilson Edwards today for your loan
    They offer all kind of categories of loan they
    Short term loan (5_10years)
    Long term loan (20_40)
    Media term loan(10_20)
    They offer loan like
    Home loan............., Business loan........ Debt loan .......
    Student loan..........,Business start up loan
    Business loan....... , Company loan.............. etc
    Email..........(wilsonedwardsloancompany@gmail.com )
    When it comes to financial crisis and loan then Wilson Edwards loan financial is the place to go please just tell him I Mrs. Anita Frank direct you Good Luck.......................

    ReplyDelete
  27. It is always a nice thing to have a critical eye. We are impressed to hear that Positive Technologies has been vital in helping to eliminate critical vulnerabilities in Siemens and Schneider Electric SCADA systems. Continue with the good work. You can always click on the link below whenever you are in need of professional dissertation paraphrasing help: PhD Dissertation Lit Review Paraphrasing Help

    ReplyDelete
  28. Make My Assignments|Assignment help make customized assignments. Our team of experts is ready to make your assignments 24x7. We provide 100% Plagiarism free work
    Assignment making service |
    Assignment help |
    Homework Help

    ReplyDelete
  29. All the best blogs that is very useful for keeping me share the ideas
    of the future as well this is really what I was looking for, and I am
    very happy to come here. Thank you very much
    earn to die
    earn to die 2
    earn to die 3
    Hi! I’ve been reading your blog for a while now and finally got the
    earn to die 4
    courage to go ahead and give youu a shout out from
    earn to die 6
    Austin Texas! Just wanted to tell
    earn to die 5
    Hi! I’ve been reading your blog for a while now and finally got the
    happy wheels
    strike force heroes
    slitherio
    you keep up the fantastic work!my weblog
    age of war
    earn to die 5

    ReplyDelete
  30. Your post will help those students who want to go in the research part ,well-written blog ,you did a nice job !!Thanks
    Assignment Help Online

    ReplyDelete
  31. Welcomes to google underwater keep sharing such ideas in the future as well. google mirror this was actually what i was looking for,and i am glad to came here!
    elgoog Hi! I’ve been reading your blog for a while google gravity I want you to thank for your time of this wonderful read!!! google terminal now and finally got the courage to go ahead and give youu a shout out from Austin Texas!
    google pacman Just wanted to tell you keep up the fantastic work!my weblog: google guitar I definately enjoy every little bit of it and I have you bookmarked to check out new stuff of your blog a must read blog! google snake
    Amazing insight you have on this, Happy wheels it's nice to find a website that details so much information about different artists... Age of war 2 This article always blew me... Earn to die For how many times I have read this.
    slither io
    slitherio
    big farm

    ReplyDelete
  32. Ilya Karpov of Russian security company, Positive Technologies, has declared nine vulnerabilities in Siemens industrial control system kit in critical operations. Now patched, the holes included two for Schneider Electric kit that cover a mix of remote and local exploits. These can allow attackers easy and beneficial system access.
    by,
    gracy
    mom & me

    ReplyDelete
  33. The blog or and best that is extremely useful to keep I can share the ideas
    of the future as this is really what I was looking for, I am very comfortable and pleased to come here. Thank you very much.
    earn to die 3
    Hi! I’ve been reading your blog for a while now and finally got the
    courage to go ahead and give youu a shout out from
    earn to die 6
    Austin Texas! Just wanted to tell
    earn to die 5
    Hi! I’ve been reading your blog for a while now and finally got the
    happy wheels
    strike force heroes
    slitherio
    you keep up the fantastic work!my weblog
    earn to die 5
    good game empire
    tank trouble 2
    earn to die new

    ReplyDelete
  34. HOW I GOT MY LOAN FROM THIS GREAT COMPANY

    Hello my dear people , I am Anita Frank, currently living in New jersey city, USA. I am a widow at the moment with three kids and i was stuck in a financial situation in April 2015 and i needed to refinance and pay my bills. I tried seeking loans from various loan firms both private and corporate but never with success, and most banks declined my credit ,do not full prey to those hoodlums at there that call them self money lender they are all scam , all they want is your money and you well not hear from them again they have done it to me twice before I met Mr. Wilson Edwards the most interesting part of it is that my loan was transfer to me within 74hours so I will advice you to contact Mr. Edwards if you are interested in getting loan and you are sure you can pay him back on time you can contact him via email……… (wilsonedwardsloancompany@gmail.com) No credit check, no co signer with just 2% interest rate and better repayment plans and schedule if you must contact any firm with reference to securing a loan without collateral then contact Mr. Wilson Edwards today for your loan
    They offer all kind of categories of loan they
    Short term loan (5_10years)
    Long term loan (20_40)
    Media term loan(10_20)
    They offer loan like
    Home loan............., Business loan........ Debt loan .......
    Student loan..........,Business start up loan
    Business loan....... , Company loan.............. etc
    Email..........(wilsonedwardsloancompany@gmail.com )
    When it comes to financial crisis and loan then Wilson Edwards loan financial is the place to go please just tell him I Mrs. Anita Frank direct you Good Luck.......................

    ReplyDelete

  35. .I am very happy to read this. This is the kind of manual that needs to be given and not the random misinformation that's at the other blogs. Appreciate your sharing this best posting.
    Buy Assignment help online

    ReplyDelete