Developers: | Schneider Electric Global |
Technology: | SCADA |
2020: Detection of the vulnerability allowing to receive full control over industrial equipment
Ilya Karpov and Evgeny Druzhinin, experts of "Laboratory of cyber security of an APCS the" of Rostelecom-Solar company which is a part of PJSC Rostelecom revealed a number of vulnerabilities in the industrial equipment of Schneider Electric used for management of power supply systems. Among them there is a row critical, allowing to intercept control over the device or to achieve a complete stop of its work. Rostelecom-Solar reported about it to TAdviser on July 7, 2020.
The research of security was conducted concerning the firm ware of the controller for automation of transformer substations of Schneider Electric Easergy T300 (HU250) and the software of Schneider Electric Easergy Builder deliverable separately which is used for setup of a configuration of such equipment. Read more here.