GE Patches Vulnerability That Allows for a “Budget” Attack

By Marcos Colon

General Electric has addressed a significant software flaw in its energy grid equipment that could allow an attacker with limited resources to disconnect the power grid.

The flaw was discovered by three researchers from New York University, who were set to present on the topic during July’s Black Hat conference in Las Vegas, Nevada. GE, however, quickly responded to the flaw on April 19, according to a Reuters report.

While the researchers did not discuss the issue within the session abstract in detail, they did note that they “completely broke the homebrew encryption algorithm used by these protection and management devices to authenticate users and allow privileged operations.”

GE told Reuters that its in the “process of issuing notifications and providing upgrades to our affected customer base.” 

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.