Security researcher Dillon Beresford says he’s found ways to bypass the S7’s security measures. He can read and write data into the computer’s memory — even when the system has password protection enabled. He also found a command shell, apparently left in the system’s firmware by Siemens engineers, that he can connect to and use to run commands on the system. The S7s are the same computers that were targeted by the Stuxnet worm, thought to have destroyed centrifuges at Iran’s Natanz nuclear reactor.”]
Source: https://www.csoonline.com/article/2129236/a-power-plant-hack-that-anybody-could-use.html