CVEvulnerability

CVE-2017-6017

7.5 HIGH Published 2017-06-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-06-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400

Description

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

Affected configurations

• schneider-electric bmxnoc0401 firmware 2.8 • schneider-electric bmxnoe0100 firmware 2.8 • schneider-electric bmxnoe0110 firmware 2.8 • schneider-electric bmxnoe0110h firmware 2.8 • schneider-electric bmxnor0200h firmware 2.8 • schneider-electric modicon m340 bmxp341000 firmware 2.8 • schneider-electric modicon m340 bmxp342000 firmware 2.8 • schneider-electric modicon m340 bmxp3420102 firmware 2.8 • schneider-electric modicon m340 bmxp3420102cl firmware 2.8 • schneider-electric modicon m340 bmxp342020 firmware 2.8 • schneider-electric modicon m340 bmxp342020h firmware 2.8 • schneider-electric modicon m340 bmxp342030 firmware 2.8 • schneider-electric modicon m340 bmxp3420302 firmware 2.8 • schneider-electric modicon m340 bmxp3420302h firmware 2.8 • schneider-electric modicon m340 bmxp342030h firmware 2.8

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References