Signature Detail
Short Name |
SCADA:MODBUS:TRI-COIL-DOS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SCADA |
Keywords |
TRI Coil Quantity Handling Denial of Service |
Release Date |
2014/07/23 |
Update Number |
2402 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCADA: TRI Coil Quantity Handling Denial of Service
This signature detects attempts to exploit a known vulnerability against SCADA Modbus Tri device. A successful attack can lead to denial of service.
Extended Description
Triangle Research International (aka Tri) Nano-10 PLC devices with firmware before r81 use an incorrect algorithm for bounds checking of data in Modbus/TCP packets, which allows remote attackers to cause a denial of service (networking outage) via a crafted packet to TCP port 502.
Affected Products
- triplc nano-10_plc -
- triplc nano-10_plc_firmware up to r80
References