Users are advised to implement robust network-level countermeasures in accordance with industry best practices for security.
We recommend that users take the following security precautions:
> Utilize the Product's IP Whitelisting Feature: Employ the device's built-in IP whitelisting function to restrict Modbus/TCP access solely to known, trusted client IP addresses.
> Implement Network Segmentation: Ensure the product is placed within a highly segregated zone
> Utilize industrial firewalls to monitor Modbus/TCP traffic
Configurations
Workarounds
Exploits
Credits
reporter
Nhan Nguyen, Hoa X. Nguyen, and Tue Lam of Unit 515 from OPSWAT