Common SCADA vulnerabilities in SCADA systems - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to identify the vulnerability related to weak passwords in SCADA systems.

SCADA systems

if system.authentication == '[1]':
    alert('Weak password detected')

Drag options to blanks, or click blank then click option'

Aencrypted

Bstrong

Cdefault

Dcomplex

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing 'strong' or 'complex' passwords as the vulnerability.

Default passwords are a common vulnerability in SCADA systems because they are easy to guess.

2fill in blank

medium

Complete the code to detect if unencrypted communication is used in SCADA.

SCADA systems

if network.protocol == '[1]':
    alert('Unencrypted communication detected')

Drag options to blanks, or click blank then click option'

ASSH

BHTTP

CHTTPS

DTLS

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing HTTPS with HTTP.

HTTP is unencrypted and vulnerable to interception, unlike HTTPS or SSH.

3fill in blank

hard

Fix the error in the code that checks for outdated SCADA software versions.

SCADA systems

if system.version [1] '1.0.0':
    alert('Outdated software version detected')

Drag options to blanks, or click blank then click option'

A<

B==

C!=

D>

Attempts:

3 left

💡 Hint

Common Mistakes

Using '==' or '!=' which do not check if version is outdated.

Versions less than '1.0.0' indicate outdated software that may have vulnerabilities.

4fill in blank

hard

Fill both blanks to detect if firewall and antivirus are disabled in SCADA.

SCADA systems

if system.firewall == [1] and system.antivirus == [2]:
    alert('Security protections disabled')

Drag options to blanks, or click blank then click option'

AFalse

BTrue

CNone

DEnabled

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'True' or 'Enabled' which mean protections are active.

Both firewall and antivirus being False means they are disabled, which is a vulnerability.

5fill in blank

hard

Fill all three blanks to create a dictionary of vulnerabilities with their status.

SCADA systems

vulnerabilities = [1]: [2] for [3] in detected_vulns if detected_vulns[[3]] == True

Drag options to blanks, or click blank then click option'

Avuln

Bstatus

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up keys and values in the dictionary comprehension.

This dictionary comprehension creates a map of vulnerability names to their status when they are detected (True).