Signature Detail

SCADA: Siemens Simatic S7-300 PLC Remote Memory Viewer

This signature detects attempts to exploit a known vulnerability in the Siemens Simatic S7-300 Programmable Logic Controller. A malicious attacker can authenticate using a hard-coded backdoor password and exract the device memory using system commands.

References

• URL: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-204-01%20S7-300_S7-400.pdf
• URL: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-186-01.pdf
• URL: http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-161-01.pdf