Project Robus

DNP3 (31/31)

#	Link	Vendor
1	ICSA-13-161-01	IOServer
2	ICSA-13-213-03	IOServer
3	ICSA-13-219-01	SEL
4	ICSA-13-226-01	Kepware
5	ICSA-13-234-02	TOP Server
6	ICSA-13-240-01	Triangle Microworks
7	ICSA-13-213-04A	Matrikon
8	ICSA-13-252-01	Subnet
9	ICSA-13-282-01	Alstom
10	ICSA-13-297-01	Catapult
11	ICSA-13-297-02	GE IP
12	ICSA-13-337-01	Elecsys
13	ICSA-13-346-02	Cybectec/Cooper
14	ICSA-13-346-01	Cooper
15	ICSA-13-352-01	Novatech
16	ICSA-14-014-01	Schneider Electric
17	ICSA-14-006-01	Schneider/Telvent
18	ICSA-14-098-01	OSISoft
19	Automatak Blog	SystemCORP
20	Automatak Blog	Major Vendor RTU
21	ICSA-14-149-01	Triangle Microworks
22	ICSA-14-154-01	COPADATA
23	ICSA-14-010-01	Matrikon
24	ICSA-14-238-01	CG Automation
25	ICSA-14-254-02	Rockwell Automation
26	ICSA-14-289-01	IOServer
27	ICSA-14-329-01	Matrikon
28	ICSA-14-303-02	Elipse SCADA
29	ICSA-14-287-01	GE IP
30	ICSA-15-055-02	Kepware
31	ICSA-15-055-01	TOP Server

IEC 60870-5-104 (1/6)

#	Link	Vendor
1	ICSA-16-299-01	Siemens
2	SUBMITTED TO CERTS	PENDING
3	SUBMITTED TO CERTS	PENDING
4	SUBMITTED TO CERTS	PENDING
5	SUBMITTED TO CERTS	PENDING
6	SUBMITTED TO CERTS	PENDING

Modbus TCP (1/1)

#	Link	Vendor
1	ICSA-14-100-01	IOServer

Telegyr 8979 (1/1)

#	Link	Vendor
1	ICSA-14-196-01	Subnet

An ongoing search for vulnerabilties in SCADA/ICS protocol implementations. 'Robus' is Latin for bulwark, source of strength, or solidity.

Why?

We believe that robust software is required to secure the ICS space. Research will create awareness. If not us, who? If not now, when?

How?

We're using the Aegis fuzzer. It is now available as a commercial tool.

Disclosure Policy

Relax, we're the good guys. We disclose vulnerabilities to the vendor and ICS-CERT. We work with affected vendors to validate patches and improve testing practices.