Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries
Information regarding several security flaws in two MSMS implementations has surfaced. These flaws could have serious consequences in industrial settings if they were to be successfully exploited.
In a new analysis, Claroty experts Mashav Sapir and Vera Mens stated that "the vulnerabilities could allow an attacker to crash an industrial device or in some cases, enable remote code execution."
Through the application-neutral exchange of supervisory control information, MMS, an OSI application layer messaging protocol, facilitates the remote control and monitoring of industrial devices.
In particular, it permits communication between programmable logic controllers (PLCs) or supervisory control and data acquisition (SCADA) systems and intelligent electronic devices (IEDs) read more a...