Siemens industrial software targeted by Stuxnet is still full of holes
Software made by Siemens and targeted by the Stuxnet malware is still full of other dangerous vulnerabilities, according to Russian researchers whose presentation at the Defcon security conference earlier this year was cancelled following a request from the company.
Positive Technologies also released two security tools on Thursday relating to WinCC. The first is a module called WinCC Harvest for the Metasploit penetration testing tool that allows an attacker to collect information from a SQL database within a Siemens SIMATIC WinCC SCADA system.
The other tool, called PLCScan, is used to scan for programmable logic controllers, which are the electronic devices used to control machines in SCADA systems.
Sign up for CIO Asia eNewsletters.
