Chinese SCADA software vulnerable
ISS Source reports that attackers could remotely exploit two vulnerabilities found in industrial control system software made in China but used worldwide.
The vulnerabilities are in two products from Sunway ForceControl Technology, a Beijing-based company that develops SCADA software for the defense, petrochemical, energy, water and manufacturing industries, said the U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).
Sunway’s products mainly see use in China but also in Europe, the Americas, Asia and Africa, according to ICS-CERT.
The problems could cause a denial of service issue or remote code exploitation in Sunway’s ForceControl 6.1 WebServer and its pNetPower AngelServer products. Dillon Beresford, who works for the security testing company NSS Labs, found the issues.
Sunway issued patches for the vulnerabilities May 20. ICS-CERT said there are no known exploits for the vulnerabilities, but computer security experts generally recommend patching software as soon as possible.
ICS-CERT added it’s unlikely someone could create consistent exploit code for the two vulnerabilities, and an attacker would need to have “intermediate” skills to exploit the problems.
SCADA software has come under increasing attention from security researchers, as the software has often not undergone rigorous security audits despite its use to manage critical infrastructure or manufacturing processes.
Case Study Database
Get more exposure for your case study by uploading it to the Control Engineering case study database, where end-users can identify relevant solutions and explore what the experts are doing to effectively implement a variety of technology and productivity related projects.
These case studies provide examples of how knowledgeable solution providers have used technology, processes and people to create effective and successful implementations in real-world situations. Case studies can be completed by filling out a simple online form where you can outline the project title, abstract, and full story in 1500 words or less; upload photos, videos and a logo.
Click here to visit the Case Study Database and upload your case study.