Signature Detail
Short Name |
SCADA:DNP3:WARM-RESTART |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SCADA |
Keywords |
DNP 3 |
Release Date |
2005/02/16 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DNP3: Warm Restart
This signature detects attempts to reinitialize a PLC or DNP3 server.
Extended Description
Since this protocol contains no authentication or access control security, an attacker with access to the distributed network system could potentially execute the "warm restart" function to cause a Denial of Service (DoS) by forcing devices to go offline, or erase audit data such as device event logs.
References