Infected New HMI Infects Chemical Plant DCS

Event Year: 2003 Reliability: Confirmed
Country: Europe
Industry Type: Chemical

A vendor/contractor built a new HMI on their own premises & network and did not install all appropriate security patches. The HMI became infected with a worm (blaster?). The HMI was walked passed the PCN firewall and was connected to the PCN when it infected other machines on the DCS.



Action Description: Raised awareness. Initiated a process & guidance for ensuring that control system devices are checked for virus/worm infection prior to being connected to process control networks.