Modicon PLC CPU Type Default Credentials (SCADA)

medium Nessus Network Monitor Plugin ID 3855

Synopsis

The remote host is configured with default or easily-guessed credentials.

Description

The Modicon Quantum, Premium and Momentum brands of PLCs have a private SNMP MIB that is available on the Internet. The type of Modicon PLC may be obtained via an SNMP Get Request.

Solution

Change default community strings to a value not easily guessed and filter access to the SNMP port.

Plugin Details

Severity: Medium

ID: 3855

Family: SCADA

Published: 12/11/2006

Updated: 4/17/2017