ic3sw0rd

focus on ICS security

[ic3sw0rd @ic3sw0rd]

@SarahFluchs @S4xNews so cool!

[ic3sw0rd @ic3sw0rd]

How to quickly discover vulnerabilities on Siemens SIMATIC PLCs, see here.
https://t.co/fKI4tYLp1M
Here is my topic for blackhat EU 2022.
https://t.co/du4KqnzbHk
#ICS #Siemens #BlackHatEurope #vulnerabilities

[Black Hat @BlackHatEvents]

Siemens SIMATIC PLC is widely used & accounts for a high proportion of the PLC market share, often used in critical infrastructure control scenarios, such as energy, water, power, oil & gas industries. Join this #BHEU Briefing to learn more -- https://t.co/PeVoMTKvnQ

[ic3sw0rd @ic3sw0rd]

Congratulations, my presentation "Fuzzing and Breaking Security Functions of SIMATIC PLCs" has been selected by blackhat EU 2022, I am glad to share my experiences on security issues of SIMATIC PLCs, Stay tuned.

https://t.co/0H2kBNO2o8

#BHEU @BlackHatEvents @NSFOCUS_Intl

[ic3sw0rd @ic3sw0rd]

@AlixAbbasi Congratulations!!!👍

[SecurityWeek @SecurityWeek]

Codesys Patches 11 Flaws Likely Affecting Controllers From Several #ICS Vendors https://t.co/VsE7CbRl7u

[ic3sw0rd @ic3sw0rd]

[CVE-2022-32137] ABB-PM564 DoS DEMO

A crafted request may cause a heap-based buffer overflow in the affected CODESYS products, resulting in a denial-of-service condition or memory overwrite.

https://t.co/CHP7nMa94x

#ICS #PLC #codesys #vulnerability

[ic3sw0rd @ic3sw0rd]

[CVE-2022-31806] Codesys V2 Runtime RCE DEMO

Password protection is not enabled by default and there is no information or prompt to enable password
protection at login in case no password is set at the controller.

https://t.co/NXVqmRuNTD

#ICS #PLC #CODESYS #vulnerability

[ic3sw0rd @ic3sw0rd]

ICS Supply Chain Threat: codesys V2 runtime multiple vulnerabilities. These vulnerabilities will affect 300+ manufacturer controllers worldwide.

https://t.co/rUVJgnyXZc

#ICS #PLC #codesys #vulnerability

[emproof @emproofsecurity]

We published a new blog post on how to bypass microcontroller ReadOut protections via fault attacks and voltage glitching:

Blog: https://t.co/WJWYyl1AUo

Code: https://t.co/pe8PXJqpNg

[ic3sw0rd @ic3sw0rd]

@langnergroup A lot of people prefer “REM”, however this comes with more risks

[heige @80vul]

Spring Framework RCE https://t.co/uIp3BmE3yq

[OffensiveOT @OffensiveOT]

Demostración de explotación de CVE contra un PLC S7-1500 de @siemensindustry que genera una #DoS en pocos segundos

[Eduard Kovacs @EduardKovacs]

Siemens has released patches for a series of new PLC vulnerabilities dubbed S7+:Crash that can be exploited to remotely crash controllers. https://t.co/mQU9sIIzjN #ICS

[ic3sw0rd @ic3sw0rd]

Multiple high-severity denial-of-service vulnerabilities exist in SIMATIC products, and the remaining vulnerabilities are still under investigation, which we named S7+:Crash.
https://t.co/GtH4rC0KE4 https://t.co/nx8UDh61Vy
@SecurityWeek @EduardKovacs
#OT #ICS #vulnerability

[ic3sw0rd @ic3sw0rd]

@EduardKovacs Siemens high-severity denial-of-service vulnerabilities PoC Demo,The S7-1500 with access protection enabled is still affected by these vulnerabilities and goes into critical failure mode.
https://t.co/xLPq1wekGL

[ic3sw0rd @ic3sw0rd]

HIGH risk vulnerabilities in Siemens PLCs —S7+:Crash https://t.co/svXCWKQaBI
#cybersecurity #ICS #Siemens #CVE #vulnerability

[ic3sw0rd @ic3sw0rd]

S7+:Crash，The vulnerabilities that have been addressed so far are CVE-2021-37185、CVE-2021-37204、CVE-2021-37205.

The S7-1500 with access protection enabled is still affected by these vulnerabilities and goes into critical failure mode.

https://t.co/xLPq1wekGL

[ic3sw0rd @ic3sw0rd]

Since August 2021, we have submitted several SIMATIC product vulnerabilities. Yesterday Siemens published a security advisory addressing three of these vulnerabilities, which we call the series: S7+:Crash.

[ic3sw0rd @ic3sw0rd]

The topic of sharing mentioned in my last tweet is as follows：
1. How to crash a password-protected Siemens SIMATIC product(S7-1500/S7-1200).
2. How to hunt 10 vulnerabilities of ABB AC500 PLC in one day.
Are there any topics of interest for you?
#ics #cybersecurity