27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Distributed <strong>Network</strong> Protocol v3 'Broadcast Request' Alert (SCADA)<br />

<strong>PVS</strong> ID: 6252 FAMILY: SCADA<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Description: SCADA Alert - Distributed <strong>Network</strong> Protocol v3 'Broadcast request'. The remote host is<br />

running the Distributed <strong>Network</strong> Protocol version 3. This protocol is common on SCADA<br />

networks. <strong>PVS</strong> has just detected broadcast traffic on the SCADA network. Broadcast is<br />

enabled, by default, on many DNPv3 devices. Given this, an attacker can attack many<br />

servers simultaneously. This can also be used by an unauthorized attacker to cause a Denial<br />

of Service (DoS) on the remote network.<br />

realtimeonly<br />

Solution: Ensure that SCADA network is only accessible by trusted hosts.<br />

CVE Not available<br />

ICCP Invalid Destination Address (SCADA)<br />

<strong>PVS</strong> ID: 6253 FAMILY: SCADA RISK: LOW NESSUS ID:Not Available<br />

Description: The remote ICCP server has just been connected to by an ICCP client with an invalid<br />

destination TSAP address.<br />

realtimeonly<br />

Solution: Solution Not Available<br />

CVE Not available<br />

ICCP Invalid Client Disconnect (SCADA)<br />

<strong>PVS</strong> ID: 6254 FAMILY: SCADA RISK: LOW NESSUS ID:Not Available<br />

Description: The remote ICCP server has just disconnected an ICCP client due to a protocol<br />

error. Receiving a number of these alerts might be an indicator of an ongoing<br />

attack, a saturated SCADA network, or a misconfigured client/server architecture.<br />

realtimeonly<br />

Solution: Solution Not Available<br />

CVE Not available<br />

ICCP Invalid OSI-SSEL (SCADA)<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

<strong>PVS</strong> ID: 6255 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available<br />

Family Internet Services 1707

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!