Re: [Full-Disclosure] east coast powergrid / SCADA [OT?]

[KF <dotslash@snosoft.com>]

>
>
>I have found out that RPC is
>used on several SCADA systems, to what extent i do not know, nor do i know
>if they are vulnerable to the recent rash of RPC based exploits.  If someone
>with more knowledge on these systems can please come forward i would greatly
>appreciate it. 
>
>  
>
yeah kinda interesting... the SCADA link here: 
http://www.automationtechies.com/sitepages/pid641.php
includes links to the following documents.

DCOM Whitepaper 
<http://www.iconics.com/support/pdfs/whitepapers/Dcom_whitepaper.pdf> 
(PDF, 149K)

DCOM Quick Start 
<http://www.iconics.com/support/pdfs/whitepapers/DCOM%20QuickStart.pdf> 
(PDF, 263K)

Microsoft DCOM Technical Overview 
<http://www.iconics.com/support/pdfs/whitepapers/msdcom.pdf> (PDF,

here is a good doc on SCADA security in general physical and digital.
http://www.automationtechies.com/sitepages/pid1062.php

-KF




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html