Headline
CVE-2022-31207: Blog - Forescout
The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication flaws as reported in FSCT-2022-0057. Control logic is downloaded to PLC volatile memory using the FINS Program Area Read and Program Area Write commands or to non-volatile memory using other commands from where it can be loaded into volatile memory for execution. The logic that is loaded into and executed from the user program area exists in compiled object code form. Upon execution, these object codes are first passed to a dedicated ASIC that determines whether the object code is to be executed by the ASIC or the microprocessor. In the former case, the object code is interpreted by the ASIC whereas in the latter case the object code is passed to the microprocessor for object code interpretation by a ROM interpreter. In the abnormal case where the object code cannot be handled by either, an abnormal condition is triggered and the PLC is halted. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, thus allowing an attacker to manipulate transmitted object code to the PLC and either execute arbitrary object code commands on the ASIC or on the microprocessor interpreter.
OT:ICEFALL: 56 Vulnerabilities Caused by Insecure-by-Design Practices in OT
It has been 10 years since Project Basecamp, a research project conducted by Digital Bond that investigated how critical operational technology (OT) devices and protocols were, to use the term they coined, “insecure by design.” Since then, we have seen hugely impactful real-world OT malware such as Industroyer, TRITON, Industroyer2 and INCONTROLLER abusing insecure-by-design functionality.
Blog
Industroyer2 and INCONTROLLER: New Findings and How Forescout Protects Against the Most Recent ICS-Specific Malware
In our new threat briefing report, Forescout’s Vedere Labs presents the most detailed public technical analysis of…
July 14, 2022
Read More
Blog
R4IoT: When Ransomware Meets the Internet of Things
Over the past few years, ransomware has been evolving because of two ongoing trends: Digital transformation driving rapid growth in…
June 1, 2022
Read More
Blog
A Hospital’s Cybersecurity:
10 Steps to Help Ensure Patient Safety and Continuous Operations
Across a health system’s digital terrain, the most vulnerable assets are connected medical devices. If those devices become compromised, the…
May 31, 2022
Read More
Request a demo
Get a personalized tour of our solutions and see how we can help you protect your digital terrain.
Request a Demo
Take a test drive
Embark on a 90-minute, hands-on tour of Forescout, covering device visibility, asset management, incident response and network segmentation.
Schedule a Test Drive