Infected New HMI Infects Chemical Plant DCS

A vendor/contractor built a new HMI on their own premises & network and did not install all appropriate security patches. The HMI became infected with a worm (blaster?). The HMI was walked passed the PCN firewall and was connected to the PCN when it infected other machines on the DCS.

Minimal