Distributed Network Protocol v3 'Stop Application' Alert (SCADA) (deprecated)

medium Nessus Network Monitor Plugin ID 6250

Synopsis

PVS has just detected a client sending the server a code '12' message.

Description

SCADA Alert - Distributed Network Protocol v3 'Stop Application' alert. The remote host is running the Distributed Network Protocol version 3. This protocol is common on SCADA networks. NNM has just detected a client sending the server a code '12' message. This message instructs the remote server to stop the application. An attacker, exploiting this flaw, would need access to the SCADA network. Successful exploitation would result in the disabling of a portion (or all) of the SCADA network.

Solution

Ensure that SCADA network is only accessible by trusted hosts.

Plugin Details

Severity: Medium

ID: 6250

Family: SCADA

Published: 1/6/2012

Updated: 1/16/2019