No backup or password for protected S7 plc!

ThePortLion

Member
T
Join Date
Oct 2007
Location
Ireland
Posts
58
Hi guys

Simple question. Is there any possible way around Siemens plc code that has PLC Access Rights enabled?

I have a plc 315-2DP which I have no offline backup for and when i try to upload anything from the cpu directly, I'm asked for a password which our now defunct vendor failed to leave us.

They setup the PLC Access Rights in Step 7.

I've spoken to Siemens support who have told me I'm basically
screwed, but I thought I'd run it by some of the automation guru's on here!

🤞🏻
 
No. From my understanding canopener is only used if you already have an offline project and you need to open blocks that have know-how protection on them.

The online code/project i'm looking has an overall protection enabled
on it which, without the password, prevents doing any sort of upload from the cpu.

Please correct me if i'm wrong.
 
There's a guy in Germany who used to be able to do this for you, he charges a fee, but if it works, then I guess that's a lesser problem.

Only problem is that the last time that he did this successfully (to my knowledge) was 2005. It's possible that Siemens has stiffened up the password protection since then, but it can't hurt to ask him.

Contact details:

S.Rothenbacher GmbH
Benzstr.6 89079 Ulm
tel: 0731 45020
fax: 0731 46055
email: [email protected] <mailto:[email protected]>
<http://www.rothenbacher-gmbh.de>
 
Thanks Barry. I had read this article. I'm not sure i have the time(/ brains!) to hack plc firmware like this.

As an update I found a 128k flash eeprom card which contains a backup of the program. I tried it in a Siemens Prommer only to find that it was password protected as well.

I can see the list of blocks on there but cant upload/open any of them.
 
Are you referring to something like WinHex?
I havent used this before.
Can you tell me how to go about this?

I also forgot to mention that it's the older type 128k flash eeprom 6ES7 951-0KG00-0AA0

The vendor left a second flash card as a backup. I opened it using a siemens prommer and
the story is the same. It's password protected, so all i could see was the block list on the card.
No editing or copying possible.
 
Last edited:
Install Winhex on the PG and see if Winhex recognises/displays the memory card contents. I've done this with MMC cards but not with the older memory cards.
 
Hi L D

I tried your suggestion but the siemens prommer does not appear as a physical drive in windows. I cannot see it in WinHex either.

It only seems to read it when i open the card from within Step7.
 

Similar Topics

H
Backup Password Protected 90-30
Does anyone know if a password protected 90-30 PLC can be backed up and restored? I think they were programmed in LM90 but I can't be sure. I...
Replies
4
Views
4,218
heldhostage
H
L
Proficy Machine Edition Project backup file password.
Dear all I have a question regarding to Proficy Machine Edition Project backup file password. I made backup file with password before 1year and...
Replies
5
Views
1,379
Steve Bailey
Steve Bailey
jimtech67
RS Logix BackUp silly question
Is there a way to reset the count on the RS Logix BackUp?? XXXXX PROGRAM IN PROGRESS_BAK445.RSS XXXXX PROGRAM IN PROGRESS_BAK446.RSS XXXXX...
Replies
8
Views
247
joseph_e2
J
B
How to B&R 7CP476.60-1 upload program Backup
Please help me How to B&R 7CP476.60-1 upload program Backup and download which program should I use. Pvi transfer tool.? And how. Thank you
Replies
0
Views
77
bylion
B
R
ABB AC500 (PM573-Eth) PLC Program Backup
Hello all, I have an ABB PLC (PM573) and it has without MC card. I need to take backup from PLC to PC (in automation builder v2.7 ). My...
Replies
10
Views
408
arpus4KM
A
Back
Top Bottom