Hard-coded key vulnerability in Logix PLCs has severity score of 10 out of 10

 In Biz & IT, industrial control systems, logix, manufacturing, Programmable logic controllers, rockwell, Tech, vulnerabilities

Hard-coded key vulnerability in Logix PLCs has severity score of 10 out of 10

Serving the Technologist for more than a decade. IT news, reviews, and analysis.
Hard-coded key vulnerability in Logix PLCs has severity score of 10 out of 10

Enlarge (credit: Rockwell Automation)

Hardware that is widely used to control equipment in factories and other industrial settings can be remotely commandeered by exploiting a newly disclosed vulnerability that has a severity score of 10 out of 10.

The vulnerability is found in programmable logic controllers from Rockwell Automation that are marketed under the Logix brand. These devices, which range from the size of a small toaster to a large bread box or even bigger, help control equipment and processes on assembly lines and in other manufacturing environments. Engineers program the PLCs using Rockwell software called Studio 5000 Logix Designer.

On Thursday, the US Cybersecurity & Infrastructure Security Administration warned of a critical vulnerability that could allow hackers to remotely connect to Logix controllers and from there alter their configuration or application code. The vulnerability requires a low skill level to be exploited, CISA said.

Read 9 remaining paragraphs | Comments

Critical authentication bypass flaw affects the entire Logix product line.

Recent Posts
Contact Us

We're not around right now. But you can send us an email and we'll get back to you, asap.

Not readable? Change text. captcha txt