CVEvulnerability
CVE-2017-6034
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-06-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287, CWE-294
Description
An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download.
Affected configurations
• schneider-electric modbus firmware
Related
References
- http://www.securityfocus.com/bid/97562 Third Party Advisory, VDB Entry
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2017/icsa-17-101-01.json github.com
- https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 Third Party Advisory, US Government Resource
- https://www.se.com/us/en/download/document/SEVD-2017-065-01/ www.se.com
- http://www.securityfocus.com/bid/97562 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 Third Party Advisory, US Government Resource