Trending the Wrong Way!
The manufacturers listed below are obfuscated. However, it is easy enough to use a quick Censys query using "services.service_name=`BACNET`" and run a report breakdown by vendor to figure it out.
This query is NOT for BACnet secure. These are legacy BACnet devices that are exposed directly to the web with a public IP. To access these devices, an attacker can use free, easy-to-use software available on the internet. NO authentication is required to manipulate and potentially cause damage to the device or worse.
The really surprising part... The number has increased from last year by 20%. Given the awareness that this problem has received, this number should be going down.
This is an easy fix with little to no operational impact. We can show you how.
AVP Technology, Operational and Compliance Risk
5 个月Hi Fred, thanks for sharing. Have you seen thematic trends for this 20% growth? Example, systems age (EOL and EOS) continues to age therefore data exchange on systems risk increases?