IEC.60870.5.104_Information.Transfer.Process.Monitor

Description

This indicates detection of the IEC 60870-5-104 Process Monitor command.
IEC 60870-5-104 is a set of standards used for telecontrol in electrical engineering.
This signature detects the command used for process information in monitor direction, which includes the following detection: M_SP_NA_1, M_SP_TA_1, M_DP_NA_1, M_DP_TA_1, M_ST_NA_1, M_ST_TA_1, M_BO_NA_1, M_BO_TA_1, M_ME_NA_1, M_ME_TA_1, M_ME_NB_1, M_ME_TB_1, M_ME_NC_1, M_ME_TC_1, M_IT_NA_1, M_IT_TA_1, M_EP_TA_1, M_EP_TB_1, M_EP_TC_1, M_PS_NA_1, M_ME_ND_1, M_SP_TB_1, M_DP_TB_1, M_ST_TB_1, M_BO_TB_1, M_ME_TD_1, M_ME_TE_1, M_ME_TF_1, M_IT_TB_1, M_EP_TD_1, M_EP_TE_1, M_EP_TF_1.

Affected Products

IEC 60870-5-104 protocol

Impact

Unexpected network communication

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Reasonable

Application Dependencies

• IEC.60870.5.104_Information.Transfer

Default Ports

• TCP/2404