Signature Detail
Short Name |
SCADA:MODBUS:CLEAR |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SCADA |
Keywords |
scada modbus |
Release Date |
2005/02/16 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
MODBUS: Clear Counters and Diagnostic Registers
This signature detects attempts to erase the counters and diagnostics of a Programmable Logic Controller (PLC). The erasure can enable attackers to hide their previous attacks.
Extended Description
A vulnerability exists in the MODBUS server as it may clear the counters and diagnostic registers when receiving a special request. Remote attackers can exploit this vulnerability to avoid detection.
References