Modicon PLC CPU Type SNMP Request Model Type Remote Disclosure
Medium Nessus Plugin ID 23823
SynopsisIt is possible to obtain the model information of a Modicon PLC using an SNMP Get Request.
DescriptionThe Modicon Quantum, Premium, and Momentum brands of PLC's have a private SNMP MIB that is available on the Internet. The type of Modicon PLC has been obtained via an SNMP Get Request. The response will be the model type such as 'Quantum'.
An attacker may use this information to profile the SCADA system and investigate known vulnerabilities of the PLC.
SolutionChange default community strings to a value not easily guessed and filter access to the SNMP port.