SCADA / PLC exploit code was released in metasploit. Now what?

Question

Wired reports that there are many security issues with Programmable Logic Controllers (PLCs) and now there is an easy to use tool to scan and detect vulnerabilities.

They say it's so easy, the update for Metasploit make it analogous to Firesheep for PLCs.

• What must IT shops do to prevent attack?

• If the PLC controllers are not on the network, or are isolated, should we still be concerned?

• If an IT shop has no PLCs in the course of business (manufacturing, etc), are the HVAC systems of the datacenter or door/access control systems vulnerable?

Answer 1

This just brings into the public eye something which has been happening for ages: everything is vulnerable. SCADA kit used to be safer as it generally wasn't connected directly to public networks and was considered obscure, however the targets are juicy, and the security levels generally pitifully low so attackers have always researched ways to exploit them.

The broad concepts to prevent attack are the same as for anything else

• segregate networks with access control devices (routers, firewalls etc)
• secure communication links (encryption, authentication, and yes, removable media!)
• harden platforms and applications
• review code
• penetration testing

In respect to your sub-questions:

• if the PLC's are not connected (and you can confirm this) then they can't be attacked through a connection. However most are connected through some type of link, so assume that link is the attack conduit
• PLC's are a specific area for this Metasploit update, however you should generally assume any system has vulnerabilities and plan accordingly based on your risk appetite.