Revealing the Secrets of Siemens S7 PLCs

YouTube·Black Hat

Explore the vulnerabilities of Siemens' SoftPLC ET 200SP in this revealing Black Hat conference talk. Delve into the architecture of PC-based PLCs, focusing on the ET 200SP's use of an Intel Atom CPU and a hypervisor controlling two virtual machines: Windows and Adonis Linux (SWCPU). Uncover the security flaws in the boot process that allow attackers to bypass encryption and access critical system components. Learn about the potential risks associated with these advanced industrial control systems and gain insights into the complex interplay between hardware, operating systems, and programmable logic in modern PLCs.