Modicon PLC CPU Type Default Credentials (SCADA)

Medium Nessus Network Monitor Plugin ID 3855

Synopsis

The remote host is configured with default or easily-guessed credentials.

Description

The Modicon Quantum, Premium and Momentum brands of PLCs have a private SNMP MIB that is available on the Internet. The type of Modicon PLC may be obtained via an SNMP Get Request.

Solution

Change default community strings to a value not easily guessed and filter access to the SNMP port.

Plugin Details

Severity: Medium

ID: 3855

File Name: 3855.prm

Family: SCADA

Published: 2006/12/11

Modified: 2017/04/17

Risk Information

Risk Factor: Medium