DNP3: Warm Restart

This signature detects attempts to reinitialize a PLC or DNP3 server.

Extended Description

Since this protocol contains no authentication or access control security, an attacker with access to the distributed network system could potentially execute the "warm restart" function to cause a Denial of Service (DoS) by forcing devices to go offline, or erase audit data such as device event logs.

Short Name
SCADA:DNP3:WARM-RESTART
Severity
Warning
Recommended
False
Recommended Action
None
Category
SCADA
Keywords
Restart Warm
Release Date
02/17/2005
Supported Platforms

srx-branch-19.3

vsrx3bsd-19.2

srx-19.4

vsrx3bsd-19.4

srx-branch-19.4

vsrx-19.4

vsrx-19.2

srx-19.3

srx-branch-12.3

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx-12.3

vmx-19.3

srx-12.3

Sigpack Version
3400
False Positive
Unknown

Found a potential security threat?