{"id":3706,"date":"2014-04-05T20:04:24","date_gmt":"2014-04-05T23:04:24","guid":{"rendered":"https:\/\/www.kwell.net\/kwell_blog\/?p=3706"},"modified":"2014-04-07T21:26:08","modified_gmt":"2014-04-08T00:26:08","slug":"bugs-en-software-scada-permitiria-controlar-7600-plantas-industriales","status":"publish","type":"post","link":"https:\/\/www.kwell.net\/kwell_blog\/?p=3706","title":{"rendered":"Bugs en software SCADA permitir\u00eda controlar 7600 plantas industriales"},"content":{"rendered":"<p>El <a href=\"http:\/\/www.bbc.com\/news\/technology-26881970\" target=\"_blank\" rel=\"nofollow\">descubrimiento\u00a0 de varios errores<\/a> en el <a href=\"http:\/\/www.yokogawa.com\/dcs\/products\/cs3000\/overview\/dcs-3k-0101en.htm\" target=\"_blank\" rel=\"nofollow\">software de Yokogawa Centum CS 3000<\/a>,\u00a0 utilizado para controlar plantas petrol\u00edferas, refiner\u00edas y de energ\u00eda impuls\u00f3\u00a0 un empuje global para reparar sistemas de control SCADA ampliamente utilizado.\u00a0 El software de Yokogawa fue lanzado para funcionar sobre Windows 98 en el a\u00f1o\u00a0 1998 y permite supervisar y controlar maquinaria en grandes instalaciones\u00a0 industriales. <!--more--><\/p>\n<p>Los <i>bugs<\/i> fueron encontrados por investigadores de\u00a0 seguridad y si fueran explotados , podr\u00edan acceso remoto a los sistemas de\u00a0 control de las instalaciones mencionadas. El <a href=\"https:\/\/ics-cert.us-cert.gov\/advisories\/ICSA-14-070-01\" target=\"_blank\" rel=\"nofollow\">Departamento de seguridad nacional de Estados\u00a0 Unidos dijo<\/a> que un atacante con &#8216;poca habilidad&#8217; ser\u00eda capaz de aprovechar\u00a0 estos errores en unas 7.600 plantas alrededor del mundo que utilizan el software\u00a0 vulnerable.<\/p>\n<p>Juan V\u00e1zquez y Julian Diaz, <a href=\"https:\/\/community.rapid7.com\/community\/metasploit\/blog\/2014\/03\/10\/yokogawa-centum-cs3000-vulnerabilities\" target=\"_blank\" rel=\"nofollow\">investigadores de seguridad en Rapid7, dijeron\u00a0 que<\/a> <i>&#8220;fuimos de cero hasta lograr el compromiso total&#8221;<\/i>. Los\u00a0 investigadores exploraron tambi\u00e9n otros software SCADA: <i>&#8220;Terminamos\u00a0 encontrando m\u00e1s 1.000 bugs en 100 d\u00edas&#8221;<\/i>. &#8221; Las vulnerabilidades registradas\u00a0 son en software de control industrial de Yokogawa Centum CS 300.<\/p>\n<div class=\"sharedaddy sd-sharing-enabled\"><div class=\"robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing\"><h3 class=\"sd-title\">Comparte esto:<\/h3><div class=\"sd-content\"><ul><li class=\"share-facebook\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-facebook-3706\" class=\"share-facebook sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=facebook\" target=\"_blank\" title=\"Haz clic para compartir en Facebook\" ><span>Facebook<\/span><\/a><\/li><li class=\"share-twitter\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-twitter-3706\" class=\"share-twitter sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=twitter\" target=\"_blank\" title=\"Haz clic para compartir en Twitter\" ><span>Twitter<\/span><\/a><\/li><li class=\"share-email\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-email sd-button share-icon\" href=\"mailto:?subject=%5BEntrada%20compartida%5D%20Bugs%20en%20software%20SCADA%20permitir%C3%ADa%20controlar%207600%20plantas%20industriales&body=https%3A%2F%2Fwww.kwell.net%2Fkwell_blog%2F%3Fp%3D3706&share=email\" target=\"_blank\" title=\"Haz clic para enviar un enlace por correo electr\u00f3nico a un amigo\" data-email-share-error-title=\"\u00bfTienes un correo electr\u00f3nico configurado?\" data-email-share-error-text=\"Si tienes problemas al compartir por correo electr\u00f3nico, es posible que sea porque no tengas un correo electr\u00f3nico configurado en tu navegador. Puede que tengas que crear un nuevo correo electr\u00f3nico t\u00fa mismo.\" data-email-share-nonce=\"da23b9029b\" data-email-share-track-url=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=email\"><span>Correo electr\u00f3nico<\/span><\/a><\/li><li class=\"share-jetpack-whatsapp\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-jetpack-whatsapp sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=jetpack-whatsapp\" target=\"_blank\" title=\"Haz clic para compartir en WhatsApp\" ><span>WhatsApp<\/span><\/a><\/li><li class=\"share-skype\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-skype-3706\" class=\"share-skype sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=skype\" target=\"_blank\" title=\"Haz clic para compartir en Skype\" ><span>Skype<\/span><\/a><\/li><li class=\"share-print\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-print sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706\" target=\"_blank\" title=\"Haz clic para imprimir\" ><span>Imprimir<\/span><\/a><\/li><li class=\"share-linkedin\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-linkedin-3706\" class=\"share-linkedin sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=linkedin\" target=\"_blank\" title=\"Haz clic para compartir en LinkedIn\" ><span>LinkedIn<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>El descubrimiento\u00a0 de varios errores en el software de Yokogawa Centum CS 3000,\u00a0 utilizado para controlar plantas petrol\u00edferas, refiner\u00edas y de energ\u00eda impuls\u00f3\u00a0 un empuje global para reparar sistemas de control SCADA ampliamente utilizado.\u00a0 El software de Yokogawa fue lanzado para funcionar sobre Windows 98 en el a\u00f1o\u00a0 1998 y permite supervisar y controlar maquinaria &hellip;<br \/><a href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706\">Read more <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n<div class=\"sharedaddy sd-sharing-enabled\"><div class=\"robots-nocontent sd-block sd-social sd-social-icon-text sd-sharing\"><h3 class=\"sd-title\">Comparte esto:<\/h3><div class=\"sd-content\"><ul><li class=\"share-facebook\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-facebook-3706\" class=\"share-facebook sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=facebook\" target=\"_blank\" title=\"Haz clic para compartir en Facebook\" ><span>Facebook<\/span><\/a><\/li><li class=\"share-twitter\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-twitter-3706\" class=\"share-twitter sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=twitter\" target=\"_blank\" title=\"Haz clic para compartir en Twitter\" ><span>Twitter<\/span><\/a><\/li><li class=\"share-email\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-email sd-button share-icon\" href=\"mailto:?subject=%5BEntrada%20compartida%5D%20Bugs%20en%20software%20SCADA%20permitir%C3%ADa%20controlar%207600%20plantas%20industriales&body=https%3A%2F%2Fwww.kwell.net%2Fkwell_blog%2F%3Fp%3D3706&share=email\" target=\"_blank\" title=\"Haz clic para enviar un enlace por correo electr\u00f3nico a un amigo\" data-email-share-error-title=\"\u00bfTienes un correo electr\u00f3nico configurado?\" data-email-share-error-text=\"Si tienes problemas al compartir por correo electr\u00f3nico, es posible que sea porque no tengas un correo electr\u00f3nico configurado en tu navegador. Puede que tengas que crear un nuevo correo electr\u00f3nico t\u00fa mismo.\" data-email-share-nonce=\"da23b9029b\" data-email-share-track-url=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=email\"><span>Correo electr\u00f3nico<\/span><\/a><\/li><li class=\"share-jetpack-whatsapp\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-jetpack-whatsapp sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=jetpack-whatsapp\" target=\"_blank\" title=\"Haz clic para compartir en WhatsApp\" ><span>WhatsApp<\/span><\/a><\/li><li class=\"share-skype\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-skype-3706\" class=\"share-skype sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=skype\" target=\"_blank\" title=\"Haz clic para compartir en Skype\" ><span>Skype<\/span><\/a><\/li><li class=\"share-print\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"\" class=\"share-print sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706\" target=\"_blank\" title=\"Haz clic para imprimir\" ><span>Imprimir<\/span><\/a><\/li><li class=\"share-linkedin\"><a rel=\"nofollow noopener noreferrer\" data-shared=\"sharing-linkedin-3706\" class=\"share-linkedin sd-button share-icon\" href=\"https:\/\/www.kwell.net\/kwell_blog\/?p=3706&amp;share=linkedin\" target=\"_blank\" title=\"Haz clic para compartir en LinkedIn\" ><span>LinkedIn<\/span><\/a><\/li><li class=\"share-end\"><\/li><\/ul><\/div><\/div><\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[1],"tags":[13,46],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=\/wp\/v2\/posts\/3706"}],"collection":[{"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3706"}],"version-history":[{"count":1,"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=\/wp\/v2\/posts\/3706\/revisions"}],"predecessor-version":[{"id":3707,"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=\/wp\/v2\/posts\/3706\/revisions\/3707"}],"wp:attachment":[{"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kwell.net\/kwell_blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}