OT-SAFETY-OVERRIDEImpact

Safety Instrumented System Override

Modify SIS logic (e.g. Triconex) to disable shutdowns — TRITON's payload; enables physical damage paths.

§ Where this technique fits

OT-SAFETY-OVERRIDE is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 5 on average.

§ Dossiers chaining this technique

HMI default credentials → operations disruption
Wonderware / iFix HMI exposed to the corporate network with vendor-default credentials. Operators see attacker-controlled values + commands sent to PLCs through legit channels.
step 5 / 5

§ Where this technique fits

§ Dossiers chaining this technique

HMI default credentials → operations disruption