IEC.60870.5.104_Information.Transfer.In.Validation

Description

This indicates the detection of IEC 60870-5-104 Information Transfer incoming traffic by the signature with parameters specified by users.
IEC 60870-5-104 is a set of standards used for telecontrol in electrical engineering.
The configurable parameters are
TypeID, value range 1:255.
COT (Cause of Transmission), value range 1:63.
COT_Negative, value range 0,1.
COT_Test, value range 0,1.
COA (Common Address of ASDU), value range 0:65535.

Affected Products

IEC 60870-5-104

Impact

Unexpected network communication

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Reasonable

Application Dependencies

• IEC.60870.5.104_Information.Transfer

Default Ports

• TCP/2404