A security researcher has disclosed a laundry list of unpatched vulnerabilities and detailed proof-of-concept exploits that allow hackers to completely compromise major industrial control systems.
Security researcher Luigi Auriemma disclosed the attacks against six SCADA (Supervisory Control and Data Acquisition) systems including US giant Rockwell Automation.
The step-by-step exploits allowed attackers to execute full remote compromises and denial of service attacks.
Some of the affected SCADA systems were used in power, water and waste distribution and agriculture.
Such zero-day information disclosure was generally frowned upon in the information security industry because it exposed customers to attack while published vulnerabilities remained unpatched.
Attacks against SCADA systems were particularly controversial because exploits could affect a host of machinery from lift control mechanisms to power plants.
The step-by-step exploits allowed attackers to execute full remote compromises and denial of service attacks.
Some of the affected SCADA systems were used in power, water and waste distribution and agriculture.
Such zero-day information disclosure was generally frowned upon in the information security industry because it exposed customers to attack while published vulnerabilities remained unpatched.
Attacks against SCADA systems were particularly controversial because exploits could affect a host of machinery from lift control mechanisms to power plants.
No comments:
Post a Comment