But Beresford found that the flaw also exists in the S7-200, S7-300 and S7-400 models of Siemens PLCs. It’s possible for an attacker to communicate directly with the PLC, without needing to use ...

The exploited PLCs were made by the automation giant Siemens and were all models from ... networks and ultimately infect then-current S7-300 and 400 series PLCs. “Seimans PLCs are used in ...

Siemens has already released patched versions of the firmware for the affected S7-300 devices, according to ICS-CERT. A separate vulnerability discovered by Beresford could allow a remote attacker ...