Fuzzing and Breaking Security Functions of SIMATIC PLCs

...In this presentation, I will take Siemens S7-1500/S7-1200 PLC with enhanced security design as the target, and elaborate on the following aspects: cracking TLS secure communication protocol, security protocol Fuzzing testing, high risk vulnerability analysis, and access protection authorization authentication.-Explain the workflow of TLS secure communication protocol, certificate usage and storage, and the relationship with S7CommPlus protocol. On this basis, make a rogue engineer station which will have control over S7-1500 with the latest firmware version, achieving the S7-1500 run, …

access analysis authentication authorization certificate communication control cracking design engineer firmware functions fuzzing high latest logic operations plc plcs presentation project protection protocol relationship risk rogue run secure communication security siemens simatic station storage target testing tls version vulnerability vulnerability analysis