Schneider Electric® has become aware of the release of a metasploit module allowing a user to send a stop command to or modify the PLC program of a Modicon Quantum PLC
The ability to send commands from Unity Pro software or over UMAS to the controller was already identified in ICS-ALERT-12-020-03 and a response is available in Schneider Electric Resolution 207378. This resolution expands on that.
Follow the recommendations found in the attached document.
(Removed File URL: 207906_2C46/resolution297906.zip)(Removed Image URL: /PubResEXPORT.nsf/2b87ee90be777fc085257c28006ee4ef/179bc9a6038b58f5c1257a5600529792/fl_block_5/0.DC?OpenElement&FieldElemFormat=gif)
Legacy KB System (APS) Data: RESL207906 V3.0, Originally authored by MiKe on 04/14/2012, Last Edited by MiKe on 08/10/2012
Related ranges: Modicon Quantum NOE - TR