CVEvulnerability
CVE-2017-11401
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-11-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.
Affected configurations
• belden tofino xenon security appliance firmware (<= 3.1.0)
References
- https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt Third Party Advisory
- https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf Vendor Advisory
- https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt Third Party Advisory
- https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf Vendor Advisory