Signature Detail
Short Name |
SCADA:ICCP:UNSUPPORTED-TPDU |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
SCADA |
Release Date |
2007/03/09 |
Update Number |
1213 |
Supported Platforms |
idp-4.1+, isg-3.5+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
ICCP: Unsupported TPDU Code
This signature detects an unsupported TPDU code. OSI Transport Class 0 (TP0) disallows the use of the Disconnect Confirm (DC), Expedited Data (ED), Acknowledge (AK), Expedited Acknowledgement (EA), and Reject (RJ) TPDUs. If such a code is received, it can possibly be a data injection or denial of service attack; it is likely that the attacked implementation would generate a Disconnect Request (DR), thereby terminating the connection.
References