Slashdot Mirror

← Back to Stories (view on slashdot.org)

Siemens SCADA Flaws To Be Disclosed At Black Hat

Posted by timothy on from the infra-infrastructure dept.

itwbennett writes "In May, NSS Labs Researcher Dillon Beresford pulled out of a Dallas hacking conference at the last minute when Siemens was unable to fix problems he'd found in the firmware of its S7 programmable logic controller. Now NSS Labs CEO Rick Moy says Beresford is rescheduled to deliver his talk at Black Hat, which runs Aug. 2-3. Beresford has discovered six vulnerabilities in the S7 that 'allow an attacker to have complete control of the device,' Moy said. Devices like the S7 do things such as control how fast a turbine spins or open gates on dams."

3 of 101 comments (clear)

  1. Hmm... by fuzzyfuzzyfungus · · Score: 3, Funny

    Does Mr. Beresford realize that, in the blasted wasteland that follows the fall of industrial civilization, pasty computer experts are relegated to the status of "slave" or "food source" by psychotic warlords wearing football/BDSM themed armor?

    Make sure that Lord Humongous owes you some favors before Blackhat rolls around, everyone!

  2. ... or open gates... by c0lo · · Score: 3, Interesting

    Devices like the S7 do things such as control how fast a turbine spins or open gates of doom.

    FTFY

    --
    Questions raise, answers kill. Raise questions to stay alive.
    1. Re:... or open gates... by fuzzyfuzzyfungus · · Score: 4, Funny

      The various fissures of Mt. Doom are SCADA controlled; but the consequences of merely possessing one of the interface controllers needed to communicate on the.. er.. somewhat sinister legacy ring bus that Sauron uses are so horrific that security through obscurity has proven more than adequate.