The system detected a change in the controller code that was made via the network. An attacker may use code changes to disrupt normal operations, to cause production losses, or to create a security threat.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Changes in the controller firmware represent a major change in the behavior of the device and usually cause a temporary interruption of operations. An attacker could use firmware changes to add malicious code to the controller, causing it to perform harmful operations which are hard to detect.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Severity
503167	Controller Code Modification Detected (Medium)	medium
503166	Controller Code Modification Detected (Low)	low
503165	Firmware Version Change Detected (Critical)	critical
503164	Firmware Version Change Detected (High)	high
503163	Firmware Version Change Detected (Medium)	medium
503162	Firmware Version Change Detected (Low)	low

Detections

Analytics

Tenable.ot Violation Family for Tenable OT Security

medium

low

critical

high

medium

low