Modbus.TCP.Write.Request.PLC

description-logoDescription

This indicates an Modbus TCP client attempted to write information to a PLC or other device.
Modbus TCP is a protocol often found in SCADA networks where it is used for process control. Since Modbus TCP does not provide any authentication, an attacker with network access can issue write requests to the PLC device which could result in the device being corrupted or displaying other undesired behaviour.

affected-products-logoAffected Products

Modbus servers.

Impact logoImpact

System Compromise: Remote attackers can write arbitrary requests to the devices.

recomended-action-logoRecommended Actions

Limit network access to PLC devices.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)