Vulnerabilities / Threats
9/27/2010
04:10 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Iran Denies Stuxnet Worm Hurt Nuclear Plant

The malware appears to have been designed to target a specific facility or control process.

An Iranian official on Sunday acknowledged that the stuxnet worm had affected personal computers at the Bushehr nuclear plant but asserted that the malware had not caused major damage.

Stuxnet is believed to have been created last year and was first detected by a security firm in Belarus in June, according to ICSA Labs. Once introduced to a computer system via a USB drive, among other attack vectors, it is designed to exploit as many as four different vulnerabilities in various versions of Microsoft Windows and to infect Supervisory Control and Data Acquisition control systems (SCADA) made by Siemens. These systems control critical infrastructure at facilities like power plants.

To date, Microsoft has patched two vulnerabilities exploited by stuxnet.

The malware has been characterized as being exceptionally sophisticated, prompting speculation that it could only be the product of an organization backed by a nation-state, such as an intelligence agency.

No proof of such claims has yet been made public.

The targeted nature of the malware, in the opinion of Siemens, means that it was created to attack a specific facility or industrial process.

"Stuxnet is obviously targeting a specific process or a plant and not a particular brand or process technology and not the majority of industrial applications," the company said in updated information it posted last week.

Symantec, which plans to present a paper on stuxnet at the Virus Bulletin Conference on September 29th, said in June that the majority of stuxnet infections it could detect (59%) were in Iran.

Attacks on critical infrastructure like the Bushehr nuclear plant are just the sort of cyber warfare that U.S. officials have long feared could occur in the U.S. and have sought to prevent through funding and legislation.

The Pentagon has refused to comment on whether or not it launched the stuxnet attack.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-7266
Published: 2015-02-01
Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for CVE-2...

CVE-2014-7269
Published: 2015-02-01
ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376....

CVE-2014-7270
Published: 2015-02-01
Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earl...

CVE-2014-8630
Published: 2015-02-01
Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shel...

CVE-2014-9200
Published: 2015-02-01
Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM X8...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.