Vulnerability in Schneider Electric Modicon M221
CVE-2017-6030
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.
EPSS exploit prediction
EPSS: 0.021 (81.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 81.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: 0.000
Affected products
- Schneider Electric Modicon M221 — versions 0
- Schneider Electric Modicon M241 — versions 0
- Schneider Electric Modicon M251 — versions 0
- Schneider-Electric Modicon M221
- Schneider-Electric Modicon M221 Firmware
- Schneider-Electric Modicon M241
- Schneider-Electric Modicon M241 Firmware
- Schneider-Electric Modicon M251
- Schneider-Electric Modicon M251 Firmware
- Schneider Electric Modicon Plcs — versions Schneider Electric Modicon PLCs
Weakness classification (CWE)
Public proof-of-concept exploits
References
- ics-cert.us-cert.gov/advisories/ICSA-17-089-02 (US Government Resource, Third Party Advisory)
- www.securityfocus.com/bid/97254 (VDB Entry, Third Party Advisory, vdb-entry)
- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2017/icsa-17-089-02.js…
Frequently asked questions
- What is CVE-2017-6030?
- CVE-2017-6030 is a medium-severity vulnerability in Schneider Electric Modicon M221, classified under CWE-343. CVSS score: 6.5/10. Published 2017-06-30.
- How severe is CVE-2017-6030?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2017-6030 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.