Discovering and Exploiting New Vulnerabilities in Remote Connection Solutions

No ratings

Presented at ICSCyberSecurityConference 2020 by

Yoav Rosenfeld

Industrial remote connection solutions, such as IIoT connectors and industrial VPNs are one of the weakest links in the industrial security chain. Yet even today, when the importance of remote connectivity becomes ever more evident in lew of COVID-19, not much has been researched or discussed regarding the security issues of remote connectivity. OTORIO's researchers have recently completed a study of some of the world's most commonly used remote connectivity solutions used for internet access to OT/ICS. The findings include multiple exploitable and vulnerabilities along with actionable suggestions for remediation.In this presentation, we will discuss the rising importance of remote connectivity in industrial settings; We will present our research and its findings, including vivid examples of how researchers were able to hack and access into industrial devices using remote access solutions; Lastly, we will list the risks and potential damages and suggests ways in which organizations can harden their remote access capabilities.