Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

ICCP Invalid OSI-SSEL (SCADA)

Info

Synopsis

The remote ICCP server has just sent a 'Session Refuse PDU' message in response to an invalid OSI Layer Selector (SSEL) value.

Description

The remote ICCP server has just sent a 'Session Refuse PDU' message in response to an invalid OSI Layer Selector (SSEL) value. As SSEL values are typically only 2 to 4 bytes long, this could indicate that a client is 'brute-forcing' a valid SSEL value. This sort of attack can also impact Availability to the server.

Solution

N/A