Chinese SCADA software vulnerable
ISS Source reports that attackers could remotely exploit two vulnerabilities found in industrial control system software made in China but used worldwide.
The vulnerabilities are in two products from Sunway ForceControl Technology, a Beijing-based company that develops SCADA software for the defense, petrochemical, energy, water and manufacturing industries, said the U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).
Sunway’s products mainly see use in China but also in Europe, the Americas, Asia and Africa, according to ICS-CERT.
The problems could cause a denial of service issue or remote code exploitation in Sunway’s ForceControl 6.1 WebServer and its pNetPower AngelServer products. Dillon Beresford, who works for the security testing company NSS Labs, found the issues.
Sunway issued patches for the vulnerabilities May 20. ICS-CERT said there are no known exploits for the vulnerabilities, but computer security experts generally recommend patching software as soon as possible.
ICS-CERT added it’s unlikely someone could create consistent exploit code for the two vulnerabilities, and an attacker would need to have “intermediate” skills to exploit the problems.
SCADA software has come under increasing attention from security researchers, as the software has often not undergone rigorous security audits despite its use to manage critical infrastructure or manufacturing processes.
- Events & Awards
- Magazine Archives
- Oil & Gas Engineering
- Salary Survey
- Digital Reports
Annual Salary Survey
After almost a decade of uncertainty, the confidence of plant floor managers is soaring. Even with a number of challenges and while implementing new technologies, there is a renewed sense of optimism among plant managers about their business and their future.
The respondents to the 2014 Plant Engineering Salary Survey come from throughout the U.S. and serve a variety of industries, but they are uniform in their optimism about manufacturing. This year’s survey found 79% consider manufacturing a secure career. That’s up from 75% in 2013 and significantly higher than the 63% figure when Plant Engineering first started asking that question a decade ago.