Distributed Network Protocol v3 'Broadcast Request' Alert (SCADA) (deprecated)

medium Nessus Network Monitor Plugin ID 6252

Synopsis

PVS has just detected broadcast traffic on the SCADA network.

Description

SCADA Alert - Distributed Network Protocol v3 'Broadcast request'. The remote host is running the Distributed Network Protocol version 3. This protocol is common on SCADA networks. NNM has just detected broadcast traffic on the SCADA network. Broadcast is enabled, by default, on many DNPv3 devices. Given this, an attacker can attack many servers simultaneously. This can also be used by an unauthorized attacker to cause a Denial of Service (DoS) on the remote network.

Solution

Ensure that SCADA network is only accessible by trusted hosts.

Plugin Details

Severity: Medium

ID: 6252

Family: SCADA

Published: 1/6/2012

Updated: 1/16/2019