Exploiting OPC UA: Practical Attacks Against OPC UA Architectures
Claroty Team82 reveals critical vulnerabilities across OPC UA protocol stack implementations, demonstrating remote code execution across industrial SCADA networks.
Summary
OPC UA as the Backbone of Industrial Automation
Open Platform Communications Unified Architecture (OPC UA) is the industry standard protocol connecting physical OT sensors, SCADA servers, and corporate IT management networks.
Auditing OPC UA Protocol Stack Implementations
Noam Moshe and Sharon Brizinov conduct an extensive two-year evaluation of major commercial and open-source OPC UA stacks powering millions of industrial devices.
Uncovering Critical Protocol Specification Pitfalls
Fuzzing complex protocol features—including method invocations, message chunking, certificate validation, and complex data variants—revealed multiple RCE and DoS zero-days.
Releasing Open-Source Exploitation Tooling
The researchers release an open-source auditing framework, providing OT asset owners and equipment vendors with tools to verify and patch OPC UA deployments.
Related talks
Main Stage·36 min
Tom Tervoort
Discloses severe cryptographic implementation flaws in the OPC UA industrial communication standard, allowing adversaries to bypass encryption and spoof OT commands.
Main Stage·42 min
Mars Cheng · Selmon Yang
TXOne researchers audit the Mitsubishi Electric factory automation ecosystem, discovering critical vulnerabilities in engineering software, protocols, and PLCs.
Main Stage·50 min
Marina Krotofil · Jason Larsen
Marina Krotofil and Jason Larsen demonstrate physical process manipulation in chemical plants, altering distillation column kinetics to cause economic disruption without tripping alarms.