Some of the protocols used within the framework of industrial control systems only offer limited security mechanisms (or none at all). Technical information such as measured and control values are often transmitted in plain text and without integrity protection or authentication. An attacker with access to the transmission medium may, in this case, read out and modify the communication contents or implement control commands. This could provoke actions or directly influence operations. An attack at the protocol level is possible even if the ICS component is configured securely otherwise and does not have any vulnerabilities.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)