Jump to content

Flex727

MVP 2023
  • Posts

    3,259
  • Joined

  • Last visited

  • Days Won

    236

Posts posted by Flex727

  1. 1 hour ago, S4TUX said:

    I see my subnet listed as 255.255.255.0

    That is your Subnet MASK, not your subnet. Your subnet is 192.168.0. You need to make the subnet match between the PC and PLC (the first 3 octets must be the same and the 4th octet different). The subnet of the PLC, as you show above is 10.2.5.

    Also, are you certain that 10.2.5.83 is the IP address of the PLC? Even so, go into UniApps and change it to 192.168.0.xxx (anything other than 71). Or, you can go into your PC network settings and change your PC IP address to 10.2.5.xxx (anything other than 83). Once you do that you should be able to communicate if you are plugged into the correct port with a crossover cable or through an ethernet hub.

  2. 38 minutes ago, swb311 said:

    Anyone affected by this hack had port 20256 forwarded to their public IP. 

    It's literally because the programming port is forwarded to the internet

    It's actually the exact opposite. The router is set to forward port 20256 from their public IP address (WAN) to their to their private IP address (LAN). This is actually fairly common, and while it's not secure, it's generally okay because there is little incentive (profit motive) to hack in these situations. Tensions in the ME provided the incentive absent a profit motive.

    It's a good lesson learned here - avoid using default settings.

    • Upvote 1
  3. 8 minutes ago, Pendalar said:

    I'm wondering if the exploit necessarily needs brute-forcing the PLC name.  If it doesn't, I wouldn't imagine setting it to an extremely long name with only special characters to necessarily help secure it in this case. 

    True, but I'm having difficulty imagining another point of attack. If there is, then Unitronics can circumvent with a firmware upgrade.

  4. 2 hours ago, _Radu_ said:

    but i trying to program the PLC via Ethernet with empty SD card insert in the PLC(this is why there is no allocation/program loaded)

    Also, not sure what you're trying to say here. The PLC program does not reside on the SD card. You can upload or download a program to or from an SD card, but that requires some PLC code to make that function.

  5. I recommend you use a different socket and port # for your communications with the external device. The reason for that is that the standard PC to PLC communications uses port 20256, and socket 1 defaults to that for you. While that is only the default, and you can change things in VisiLogic to use any port you want, there is no reason not to keep this as simple as possible while you're learning.

    Use socket 2 or 3 and set it to an appropriate port # for your external device. It doesn't hurt to go ahead and initialize socket 1 to port 20256 and set to server (slave) for your PC-PLC comms using VisiLogic over ethernet.

  6. On 11/10/2023 at 9:27 AM, Flex727 said:

    in Ping, when using a leading zero it interprets the number as hex rather than decimal

     

    On 11/12/2023 at 2:59 AM, Saragani said:

    when padding a zero before  the number, chrome (and probably all the browsers) is parsing it in Oct base

    Ah! Octal, not hex.

  7. 11 hours ago, kratmel said:

    I concluded that the limitation in the number of files in the folder occurs due to the maximum length of the file name reserved in the PLC. That is, since the PLC is not a PC, it is probably impossible to implement a full mode of interaction with the SD card. Therefore, in advance, the developers limited the number of files so as not to exceed the capabilities of the file system when writing the appropriate file names.

    This really makes a ton of sense. Thanks for the great research and analysis.

  8. 20 minutes ago, Ausman said:

    For what it's worth, I've been trying a quality Toshiba SD in a system that routinely corrupted things, and for a year or so now it has been fine, so I an inclined to believe that "although all cards are created equal, some are better than others!"

    SD card quality is a big problem today. Many of the Chinese knock-offs are horrible and will corrupt quickly and easily. I stick with name brands now, no matter the cost.

×
×
  • Create New...