GE Power Grid Relays Found with Hard Coded Password and Breached Encryption
-
GE, one of the biggest players in the US power grid system, has been caught having implemented protection relays in the power grid system using a home-made encryption system (which has been compromised) and hardcoded passwords (which are now exposed and known to hackers) leaving the power grid exposed and able to be turned on and off at will by those that have breached the system and know the passwords. GE has provided patches for some of the products and is rushing to fix the ones remaining. How many, if any, customers have taken advantage of the patches and upgraded their systems, is unknown. The attack requires access to the devices, so only if exposed to the Internet is the risk very high, but given that we are talking about systems without standard encryption and with hard coded passwords, what are the chances that other proper security systems are in place?
-
Good to know that the power grid relies on "LAN-based security." Argh.
-
-
Wow, the fail is strong today. GE here, Netgear deleting everything, and HPE discontinuing products and trying to keep it a secret from customers, it's been a bang up day already.
-
One of the many reasons we need to work to modernize our electrical system.
-
@travisdh1 said in GE Power Grid Relays Found with Hard Coded Password and Breached Encryption:
Wow, the fail is strong today. GE here, Netgear deleting everything, and HPE discontinuing products and trying to keep it a secret from customers, it's been a bang up day already.
@travisdh1 said in GE Power Grid Relays Found with Hard Coded Password and Breached Encryption:
Wow, the fail is strong today. GE here, Netgear deleting everything, and HPE discontinuing products and trying to keep it a secret from customers, it's been a bang up day already.
Don't forget the Webroot disaster earlier this week.
-
@coliver said in GE Power Grid Relays Found with Hard Coded Password and Breached Encryption:
One of the many reasons we need to work to modernize our electrical system.
Or, you know, use competent contractors for the components.
