Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

Researchers at Forescout used an AI tool called Claude to adapt a remote code execution exploit for use on different WAGO PLC models. This process was relatively quick and inexpensive, taking only hours and costing hundreds of dollars. The experiment demonstrated the potential for AI to facilitate the porting of exploits between different models of programmable logic controllers. The use of AI in this context raises concerns about the potential for increased vulnerability exploitation. The researchers were able to successfully port the exploit using the AI tool. The experiment highlights the potential risks associated with the use of AI in exploiting vulnerabilities in industrial control systems.