Executive Summary

This vulnerability involves the transmission of service information as BACnet packets over the network without encryption. Because the data is sent in clear text, an attacker can sniff, intercept, and modify the information being transmitted.

Specifically, sensitive details such as the File Start Position and File Data can be captured from network traffic using tools like Wireshark with its BACnet dissector filter. Additionally, the proprietary format used by WebCTRL to receive updates from the PLC can be intercepted and reverse engineered by an attacker.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to serious security risks because attackers can capture and modify sensitive information transmitted over the network.

• Confidential information such as file positions and data can be exposed.
• Attackers can manipulate the intercepted data, potentially causing unauthorized changes or disruptions.
• Reverse engineering of proprietary formats may allow attackers to better understand and exploit the system.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring network traffic for unencrypted BACnet packets. Tools like Wireshark can be used with the BACnet dissector filter to sniff and analyze BACnet packets, revealing sensitive information such as File Start Position and File Data.

• Use Wireshark with the BACnet dissector filter to capture and inspect BACnet traffic.
• Look for unencrypted service information transmitted over the network.

Useful 0 Not Useful 0

Mitigation Strategies

I don't know

Useful 0 Not Useful 0