WIN32/INDUSTROYER
web-assets.esetstatic.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2015-5374A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions <…Public exploitT1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation1 report74.5%Top 0.5%65.4priority
Where it names them
CVE-2015-5374 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
the CVE-2015-5374 vulnerability in order to render a device unresponsive
xploit this vulnerability the attackers hardcoded the device IP addresses into this tool Once the tool is executed it sends specifically crafted packets to port 50,000 of the target IP addresses using UDP The UDP packet contains only 18 bytes Figure 20 Content of UDP packet used during exploitation of CVE-2015-5374
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.