Potential risks and compensating controls
Area | Issue | Risk | Compensating controls |
Passcode through meter display User accounts |
Default settings are often the source of unauthorized access by malicious users. |
If you do not change the default password/passcode, unauthorized access can occur. |
Change the default password/passcode to help reduce unauthorized access. |
Secure protocols |
Ethernet port with Modbus TCP, BACnet/IP, DNS, SNMP, SNTP protocols are unsecure. The device does not have the capability to transmit encrypted data using these protocols. |
If a malicious user gained access to your network, they could intercept communications. |
For transmitting data over an internal network, physically or logically segment the network. For transmitting data over an external network, encrypt protocol transmissions over all external connections using an encrypted tunnel, TLS wrapper or a similar solution. |