- About Trend Micro
- Newsroom
- Press Releases
- 2020
- Trend Micro Research Reveals Serious Vulnerabilities in Critical Industry 4.0-IT Interfaces
DALLAS, Aug. 5, 2020 /PRNewswire/ -- Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity solutions, today released research revealing a new class of security vulnerabilities in protocol gateway devices that could expose Industry 4.0 environments to critical attacks.
Also known as protocol translators, protocol gateways allow machinery, sensors, actuators and computers that operate in industrial facilities to talk to each other and to IT systems that are increasingly connected to such environments.
"Protocol gateways rarely get individual attention, but their importance to Industry 4.0 environments is significant and can be singled out by attackers as a critical weak link in the chain," said Bill Malik, vice president of infrastructure strategy for Trend Micro. "By responsibly disclosing nine zero-day vulnerabilities with the affected vendors, Trend Micro is leading the way with industry-first research that will help to make global OT environments more secure."
Trend Micro Research analyzed five popular protocol gateways focused around translation of Modbus, one of the most widely used OT protocols globally.
As detailed in the new report, vulnerabilities and weaknesses found in these devices include:
Attacks leveraging such weaknesses could allow malicious hackers to view and steal production configurations and sabotage key industrial processes by manipulating process controls, camouflaging malicious commands with legitimate packets, and denying process control access.
The report makes several key recommendations for vendors, installers and end users of industrial protocol gateways:
The results of this research will be presented at Black Hat USA on August 5. To find out more and read the full report, please visit: https://www.trendmicro.com/vinfo/no/security/news/internet-of-things/lost-in-translation-when-industrial-protocol-translation-goes-wrong.
About Trend Micro
Trend Micro, a global leader in cybersecurity, helps make the world safe for exchanging digital information. Leveraging over 30 years of security expertise, global threat research, and continuous innovation, Trend Micro enables resilience for businesses, governments, and consumers with connected solutions across cloud workloads, endpoints, email, IIoT, and networks. With over 6,800 employees in 65 countries, and the world’s most advanced global threat research and intelligence, Trend Micro enables organizations to secure their connected world. www.trendmicro.com
Karianne Myrvold
Tel: +47 2212 8500