Widespread Logic Controller Flaw Raises the Specter of Stuxnet

Lily Hay Newman, *Ars Technica*, 11 Jan 2023, via ACM TechNews

Siemens has disclosed that a vulnerability in its SIMATIC S7-1500 series of
programmable logic controllers could allow attackers to install malicious
firmware and assume full control of the devices. Red Balloon Security
researchers discovered the vulnerability, which is the result of a basic
error in the cryptography's implementation. However, because the scheme is
physically burned onto a dedicated ATECC CryptoAuthentication chip, a
software patch cannot fix the vulnerability. Siemens …

ars technica attackers basic control controllers cryptography devices error firmware flaw install lily hay newman logic malicious programmable logic controllers red balloon red balloon security researchers result security security researchers series siemens simatic stuxnet technews vulnerability