FORESCOUT researchers successfully demonstrated AI's capability to port a PLC exploit from the WAGO 750-852 model to the WAGO 750-831 despite challenges. Using the CVE-2021-31886 vulnerability, they spent $536 and over 8 hours in guided sessions with AI named Claude, achieving two functional exploits. The process highlighted the challenges of working with embedded firmware and the potential risks, as one payload accidentally bricked the hardware.
This research shows that AI can simplify exploit development but still requires expert oversight, raising concerns about the vulnerabilities of industrial systems to future AI-driven attacks.