AM2432: Profinet SNMP cybersecurity vulnerabilities

Andrea Politano

Prodigy 160 points

Part Number: AM2432

Tool/software:

Hi,

I am using AM2432 with Profinet from the Industrial SDK 09.02.00.24.

Our team has performed a cybersecurity scan with the tool Nessus, and the two problems in the screen were found:

I already asked in my previous post (here), and I was told that some filters would be introduced in later releases. Now I am using SDK 09.02.00.24 but the problems persist.

When will these filters be introduced to solve these two problems? it is crucial for us to be able to solve them.

Thank you,

Best regards,

Andrea

4 months ago

0 Laxman Chinnannavar 4 months ago

TI__Intellectual 3000 points

Hi Andrea,

I have looped in the PROFINET stack expert to provide more info on this topic. They will be replying soon, after confirming the status of this issue.

Thanks and Regards,
Laxman

0 Kamil Alkhouri 4 months ago

TI__Intellectual 1070 points

Hi Andrea,

would you be able to share wireshark traces between Nessus and our device?

Thanks.
Kind regards,
Kamil

0 Andrea Politano 4 months ago in reply to Kamil Alkhouri

Prodigy 160 points

Hi Kamil,

thank you for your response.

We will repeat the tests and attach Wireshark traces next week.

Thank you,

Kind Regards,

Andrea

0 Kamil Alkhouri 2 months ago in reply to Andrea Politano

TI__Intellectual 1070 points

Hi Andrea,

as per our communication per email, our next release will include many features related to SNMP services (activate/deactivate, read-only access, changing community names, etc.). This should solve the problems you mentioned here.

Please feel free to contact us if you have further questions.

Thanks.
Kind regards,
Kamil

Arm-based microcontrollers

Arm-based microcontrollers forum

AM2432: Profinet SNMP cybersecurity vulnerabilities