Adversaries may perform broadcast discovery requests to enumerate systems and devices on a network. Broadcast discovery works by one system or device sending messages to all systems and devices on a network (or subnet) and then waiting for a response. If a response is received that means the system or device that responded is live and can communicate over that protocol. Adversaries may leverage different protocols supported on the network for sending broadcast messages. Some common OT protocols that have broadcast discovery mechanisms are Building Automation and Control Network (BACNet) Who-Is requests, Common Industrial Protocol (CIP) List Identity User Datagram Protocol (UDP) broadcast requests, and Siemens S7 broadcast identification requests.(Citation: Broadcasting BACnet)(Citation: Cisco Active Discovery)

Linked Issues

Issuelinks
Linktype Issue
is related to Techniques
is related to Programmable Automation Controller (PAC)
is related to Routers
is related to Intelligent Electronic Device (IED)
is related to Programmable Logic Controller (PLC)
is related to Distributed Control System (DCS) Controller
is related to Jump Host
is related to Data Historian
is related to Human-Machine Interface (HMI)
is related to Switch
is related to Data Gateway
is related to Firewall
is related to Virtual Private Network (VPN) Server
is related to Remote Terminal Unit (RTU)
is related to Safety Controller
is related to Application Server
is related to Workstation
is related to Control Server
is blocked by Network Segmentation
is blocked by Static Network Configuration
is blocked by Detection of Broadcast Discovery
Impressum German English