Adversaries may execute a full program download to a PLC to overwrite the entire PLC program and configuration to deploy a new project or make major changes. This typically requires stopping the PLC and adversely impacting control processes. The ability to perform a full program download to the PLC typically relies on access to a workstation with the vendor-specific PLC programming software installed.

Linked Issues

Issuelinks
Linktyp Issue
is related to Techniques
is related to Safety Controller
is related to Distributed Control System (DCS) Controller
is related to Programmable Logic Controller (PLC)
is related to Programmable Automation Controller (PAC)
is blocked by Detection of Program Download All
is blocked by Code Signing
is blocked by Audit
is blocked by Communication Authenticity
is blocked by Authorization Enforcement
is blocked by Access Management
is blocked by Filter Network Traffic
is blocked by Network Segmentation
is blocked by Human User Authentication
is blocked by Software Process and Device Authentication
is blocked by Network Allowlists
Impressum Deutsch Englisch