Adversaries may execute an online edit of a PLC to update parts of an existing program. It does not require stopping the PLC which allows it to continue running during transfer and reconfiguration without interruption to process control. Adversaries may leverage this approach to minimize downtime and evade detection. The ability to perform an online edit to the PLC typically relies on access to a workstation with the vendor-specific PLC programming software installed.

Linked Issues

Issuelinks
Linktyp Issue
is related to Techniques
is related to Distributed Control System (DCS) Controller
is related to Programmable Logic Controller (PLC)
is related to Programmable Automation Controller (PAC)
is related to Safety Controller
is blocked by Human User Authentication
is blocked by Communication Authenticity
is blocked by Network Segmentation
is blocked by Network Allowlists
is blocked by Authorization Enforcement
is blocked by Access Management
is blocked by Filter Network Traffic
is blocked by Audit
is blocked by Software Process and Device Authentication
is blocked by Detection of Online Edit
is blocked by Code Signing
Impressum Deutsch Englisch