Microsoft found 15 high-risk vulnerabilities in industrial software, which can seriously shut down power stations.

CTOnews.com, August 16 (Xinhua)-- Microsoft network security experts recently issued a security announcement saying that 15 high-risk vulnerabilities have been found in the tool for developing programmable logic controllers (PLC). These vulnerabilities are so destructive that attackers can take advantage of them, shut down power plants, and so on.

Microsoft threat analyst Vladimir Tokarev found 15 high-risk vulnerabilities in CODESYS V3 SDK, which is widely used in industrial environments and has been used to develop millions of PLC controllers.

These PLC products are used by robots, data center power, medical solutions and security systems, as well as commercial and residential building automation systems.

The tracking numbers of these vulnerabilities include CVE-2022-47379, etc., and their risk rating ranges from 7.5 to 10 (out of 10).

CTOnews.com Note: Microsoft discovered the above vulnerability in September 2022, and developers using CODESYS recommend version 3.5.19.0 and later.

Microsoft recommends that SPS and related infrastructure be separated and separated from the Internet to reduce the possibility of attacks.

Microsoft 365 Defender has also released freeware tools designed to help engineers and administrators identify vulnerable devices in their infrastructure.