Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

ICCP Invalid OSI-PSEL (SCADA)

Info

Synopsis

The remote ICCP server has just sent an ACSE Abort Message in response to an invalid Presentation Layer Selector (PSEL) value.

Description

The remote ICCP server has just sent an ACSE Abort Message in response to an invalid Presentation Layer Selector (PSEL) value. As PSEL values are typically only 2 to 4 bytes long, this could indicate that a client is 'brute-forcing' a valid PSEL value. This sort of attack can also impact Availability to the server.

Solution

N/A