DOCA0343EN-02

Potential Risks and Compensation Controls

Area

Issue

Risk

Compensating Controls

Unsecure protocols

Modbus RTU, Modbus TCP/IP, BACnet MSTP, BACnet IP and some IT protocols ( DHCP, DNS, and DPWS) are unsecure.

The device does not have the capability to transmit data encrypted using these protocols.

These protocols do not support encrypted data transmission. If a malicious user gains access to the network, they could intercept and manipulate communications.

  • For internal networks: Physically or logically segment the network to limit access.

  • For external networks: Use encryption (For example: VPN) to secure data transmission.

QR Code is a registered trademark of DENSO WAVE INCORPORATED in Japan and other countries.

Was this helpful?