Armis discloses critical vulnerability that allows remote takeover of Schneider Electric industrial controllers

This article has been indexed from IT Security Guru

Researchers at Armis, the unified asset visibility and security platform provider, have disclosed the discovery of an authentication bypass vulnerability in Schneider Electric’s Modicon programmable logic controllers (PLCs) that can lead to remote-code-execution (RCE). The vulnerability, dubbed Modipwn, allows for a complete takeover of impacted devices by leveraging the UMAS protocol, and impacts Modicon M340, M580 […]

The post Armis discloses critical vulnerability that allows remote takeover of Schneider Electric industrial controllers appeared first on IT Security Guru.

Read the original article: Armis discloses critical vulnerability that allows remote takeover of Schneider Electric industrial controllers