Nullcon Goa 2023 | Hacking Mitsubishi PLC Without Access To Firmware by Anton Dorfman

This talk features Anton Dorfman as he explores the challenges faced by security researchers when working with smart devices that have undocumented proprietary network protocols. He details the process of reverse engineering the Mitsubishi FX5U PLC, focusing on the encrypted firmware and the methods employed to reconstruct the protocol without direct access to the firmware. The speaker shares insights on using documentation, error codes, vendor utilities, and brute force techniques to uncover vulnerabilities. He provides a thorough examination of vulnerabilities CVE-2022-25161 and CVE-2022-25162, highlighting their potential impact on industrial systems.