Re:Vulnerable industrial controls directly connected to Inte...
by folkhack on Monday January 29, 2018 @01:50PM
(#16259662)
> An industrial control system that crashes when it receives an unexpected network request isn't built for someone that knows exactly what they are doing.
Yeah - I can see even the simplest of network vulnerability scans wreak havoc on a device like this.
Re:Vulnerable industrial controls directly connected to Inte...
by Parcissons on Monday January 29, 2018 @03:18PM
(#16260302)
Its enough to just plug in a cable into two switch ports.
This isn't just about hacking. A device that crashes hard when it receives a POST with an empty body may do the same thing if there's a physical glitch with its connection, or if a cosmic ray flips a bit somewhere. Devices that control industrial machinery should be more reliable than that.
If this were a hobbyist project, or a toy, that would be one thing, but these are specialized devices that cost a lot of money. They're fragile liabilities that don't belong anywhere near a shared network.