{"id":47638,"date":"2025-09-17T17:53:41","date_gmt":"2025-09-17T17:53:41","guid":{"rendered":"https:\/\/becolve.com\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/"},"modified":"2025-09-17T17:53:52","modified_gmt":"2025-09-17T17:53:52","slug":"vulnerabilidade-grave-em-plc-da-siemens","status":"publish","type":"blog","link":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/","title":{"rendered":"Vulnerabilidade grave em PLC da Siemens."},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”3.22″][et_pb_row _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.8.1″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”]<\/p>\n

Foi descoberta uma nova vulnerabilidade<\/strong> muito grave que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.<\/p>\n

A vulnerabilidade \u00e9 a CVE-2020-15782<\/a><\/strong> e afeta as CPU SIMATIC S7-1200 e S7-1500<\/strong> e poder\u00e1 permitir contornar as prote\u00e7\u00f5es de mem\u00f3ria destes dispositivos para escrever ou ler dados arbitr\u00e1rios em \u00e1reas de mem\u00f3ria restrita e, com isso, elaborar ataques mais sofisticados ao dispor de acesso completo \u00e0 mem\u00f3ria do dispositivo.<\/p>\n

Engenheiros de ciberseguran\u00e7a da Claroty identificaram esta vulnerabilidade e mostram como um atacante poderia aproveit\u00e1-la<\/strong>, simplesmente tendo acesso \u00e0 porta TCP 102 do PLC,<\/strong> e escrever uma shellcode diretamente na estrutura do sistema operativo e, desta maneira, dar a capacidade de executar c\u00f3digo remoto e\/ou adicionar caracter\u00edsticas maliciosas ocultas.<\/p>\n

Na seguinte entrada do blog da Claroty<\/strong><\/a> explica-se em detalhe como contornar a sandbox destes PLC.<\/p>\n

\n

Um ataque bem-sucedido desta vulnerabilidade pode ser muito dif\u00edcil de detetar<\/strong>, j\u00e1 que seria o pr\u00f3prio PLC a executar as a\u00e7\u00f5es maliciosas diretamente no processo.<\/p>\n<\/blockquote>\n

Como sempre, a solu\u00e7\u00e3o passa por manter os sistemas atualizados<\/strong> e ter consci\u00eancia de como funcionam realmente as redes industriais gra\u00e7as a solu\u00e7\u00f5es de monitoriza\u00e7\u00e3o profunda<\/strong>.<\/p>\n

 <\/p>\n

[\/et_pb_text][et_pb_button button_url=”https:\/\/logitek.es\/industrial-cybersecurity-awareness\/” url_new_window=”on” button_text=”Aceda \u00e0s nossas solu\u00e7\u00f5es de monitoriza\u00e7\u00e3o” button_alignment=”center” _builder_version=”4.8.1″ _module_preset=”default” hover_enabled=”0″ custom_button=”on” button_text_color=”#1ca821″ sticky_enabled=”0″ button_bg_color=”#FFFFFF” button_bg_enable_color=”on” button_border_color=”#1ca821″][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

Foi descoberta uma nova vulnerabilidade muito grave que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.<\/p>\n","protected":false},"author":31,"featured_media":47639,"menu_order":0,"template":"","categories":[969],"tags":[],"arquitectura":[1838],"area":[],"sector":[],"experto":[203],"weborigen":[157],"productos-tax":[166],"soluciones-tax":[221],"marcas-tax":[],"coauthors":[],"class_list":["post-47638","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-ciberseguranca","arquitectura-ciberseguranca-industrial","experto-ciberseguranca-industrial-disponibilidade-total","weborigen-ciberseguridadlogitek-com","productos-tax-isid","soluciones-tax-network-monitoring-and-analysis-pt-pt"],"acf":[],"yoast_head":"\nCiberseguran\u00e7a: Vulnerabilidade grave em PLC da Siemens<\/title>\n<meta name=\"description\" content=\"Nova vulnerabilidade muito grave em PLC Siemens que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ciberseguran\u00e7a: Vulnerabilidade grave em PLC da Siemens\" \/>\n<meta property=\"og:description\" content=\"Nova vulnerabilidade muito grave em PLC Siemens que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-17T17:53:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/ataque.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Becolve Digital\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/\",\"name\":\"Ciberseguran\u00e7a: Vulnerabilidade grave em PLC da Siemens\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ataque.jpg\",\"datePublished\":\"2025-09-17T17:53:41+00:00\",\"dateModified\":\"2025-09-17T17:53:52+00:00\",\"description\":\"Nova vulnerabilidade muito grave em PLC Siemens que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ataque.jpg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ataque.jpg\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/vulnerabilidade-grave-em-plc-da-siemens\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Vulnerabilidade grave em PLC da Siemens.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ciberseguran\u00e7a: Vulnerabilidade grave em PLC da Siemens","description":"Nova vulnerabilidade muito grave em PLC Siemens que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/","og_locale":"pt_PT","og_type":"article","og_title":"Ciberseguran\u00e7a: Vulnerabilidade grave em PLC da Siemens","og_description":"Nova vulnerabilidade muito grave em PLC Siemens que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.","og_url":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/","og_site_name":"Becolve Digital","article_modified_time":"2025-09-17T17:53:52+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/ataque.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Tempo estimado de leitura":"2 minutos","Written by":"Becolve Digital"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/","url":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/","name":"Ciberseguran\u00e7a: Vulnerabilidade grave em PLC da Siemens","isPartOf":{"@id":"https:\/\/becolve.com\/pt-pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/ataque.jpg","datePublished":"2025-09-17T17:53:41+00:00","dateModified":"2025-09-17T17:53:52+00:00","description":"Nova vulnerabilidade muito grave em PLC Siemens que permite a execu\u00e7\u00e3o de c\u00f3digo de forma remota e sem necessidade de autentica\u00e7\u00e3o.","breadcrumb":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/"]}]},{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/ataque.jpg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/ataque.jpg","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/pt-pt\/blog\/vulnerabilidade-grave-em-plc-da-siemens\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/pt-pt\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/pt-pt\/blog\/"},{"@type":"ListItem","position":3,"name":"Vulnerabilidade grave em PLC da Siemens."}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/pt-pt\/#website","url":"https:\/\/becolve.com\/pt-pt\/","name":"Becolve Digital","description":"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/pt-pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/pt-pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"},{"@type":"Organization","@id":"https:\/\/becolve.com\/pt-pt\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/pt-pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/47638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/users\/31"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/47638\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media\/47639"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=47638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/categories?post=47638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/tags?post=47638"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/arquitectura?post=47638"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/area?post=47638"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/sector?post=47638"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/experto?post=47638"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/weborigen?post=47638"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/productos-tax?post=47638"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/soluciones-tax?post=47638"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/marcas-tax?post=47638"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/coauthors?post=47638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}