Access Control: Unauthenticated Modbus Write¶

Identifier: modbus_unauthenticated_write

Scanner Support¶

Description¶

Modbus services that accept unauthenticated write operations can let attackers alter industrial control state remotely.

How we test: We validate whether a reachable Modbus service permits write operations without authentication and report it when write access succeeds.

Configuration¶

Example¶

Example configuration:

---
security_tests:
  modbus_unauthenticated_write:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.