Saint ISaPWN, Who Read the PLCs' Files

Patron of ISaGRAF industrial runtimes, protocols that do not filter filenames, and plants that never stop.

Life

On 23 May 2022 Kaspersky ICS-CERT published ISaPWN, a set of flaws in Rockwell Automation's ISaGRAF runtime, used in industrial controllers from many vendors. Some commands of the IXL protocol performed file operations without checking for reserved characters in the names: a remote, unauthenticated attacker could thus read and write files on the device, and the weakly protected communication made it all easier.

Prayer

O Saint ISaPWN, who walks the plants' files like open corridors, let our industrial protocols filter every name. Amen.

How to celebrate

Celebrated by updating the ISaGRAF runtime and keeping industrial networks far from the Internet.

Unfiltered filename, wide-open plant.