3 ms·
Also, for the particular case of MODBUS over TCP, MODBUS itself doesn't have any security aspect (by design) it is a very simple byte read/write protocol really
by westi 11y ago
Also, for the particular case of MODBUS over TCP, MODBUS itself doesn't have any security aspect (by design) it is a very simple byte read/write protocol really.
http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b3.pdf http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b...
- thoughtsimple 11y agoJust read over their FAQ. They claim that Modbus over TCP is an internet protocol. No where do they even mention security. I wonder how many devices are sitting on IPv4 addresses that are completely controllable over the net without a shred of security. Lovely.
- westi 11y agoPreviously: https://blog.shodan.io/dont-be-clever/ https://blog.shodan.io/dont-be-clever/ > For example, you might know that Shodan crawls the Internet for industrial control systems (ICS). One of the most popular protocols in ICS is called Modbus that runs on port 502. At the moment, there are about 17,000 devices listening to Modbus on the default port. It turns out there are also 700 devices listening on port 503, again a one-off sort of situation. Probably over 20k by now
- thoughtsimple 11y agoThanks. Exactly as bad as I expected.