high7.5
CVE-2017-6017
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMX…
Impact
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Bmxnoc0401 Firmware | Version 2.8 |
| Schneider-Electric | Bmxnoe0100 Firmware | Version 2.8 |
| Schneider-Electric | Bmxnoe0110 Firmware | Version 2.8 |
| Schneider-Electric | Bmxnoe0110h Firmware | Version 2.8 |
| Schneider-Electric | Bmxnor0200h Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp341000 Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp342000 Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp3420102 Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp3420102cl Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp342020 Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp342020h Firmware | Version 2.8 |
| Schneider-Electric | Modicon M340 Bmxp342030 Firmware | Version 2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96414
- https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
- https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/
- http://www.securityfocus.com/bid/96414
- https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
- https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/