ICS / OTTCP/UDP 44818 Cleartext by default
Port 44818: EtherNet/IP
EtherNet/IP (CIP)
Industrial protocol carrying the Common Industrial Protocol, common with Rockwell/Allen-Bradley equipment. UDP 2222 carries real-time I/O.
How attackers abuse it
- Device enumeration and unauthorised commands on flat networks.
How to defend it
- Zone segmentation and CIP Security where supported.
Exam tip
The 'IP' in EtherNet/IP stands for Industrial Protocol, not Internet Protocol.