"Researcher Finds Nearly Two Dozen SCADA Bugs in a Few Hours' Time"

Last week, researchers at ReVuln, an Italian security firm, released a video showing off a number of zero-day vulnerabilities in SCADA applications from manufacturers such as Siemens, GE and Schneider Electric. And now a researcher at Exodus Intelligence says he has discovered more than 20 flaws in SCADA packages from some of the same vendors and other manufacturers, all after just a few hours' work.

Quelle: threatpost.com vom 26.11.12 

SCADA software, which is used to run systems at utilities, manufacturing plants and other critical points, has become a key target recently for security researchers as well as attackers and politicians. (...)

"The most interesting thing about these bugs was how trivial they were to find. The first exploitable 0day took a mere 7 minutes to discover from the time the software was installed. For someone who has spent a lot of time auditing software used in the enterprise and consumer space, SCADA was absurdly simple in comparison. The most difficult part of finding SCADA vulnerabilities seems to be locating the software itself,"

Sehr beruhigend ...