Port 502 open.
http://10.48.156.248:8080/login
Tried it — could not find credentials to get in.
So I went straight at the PLC instead.
Found a single holding register open. Figured it was holding the temperature value, so I overwrote it.
After that:
Coil 15 turns on once the temperature is high — that coil is the cooler. So if you want the thing to blow up, you switch it off.
Cooler off, coil address 15.
http://10.48.156.248/video?mode=explodedflag23
