High severity · published Jun 30, 2017
CVE-2017-6017
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000,…
7.5
CVSS
4.8%
EPSS
No
On KEV
Description
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bmxnoc0401 Firmware · Schneider-electric
2.8 · source: NVD
BF
Bmxnoe0100 Firmware · Schneider-electric
2.8 · source: NVD
BF
Bmxnoe0110 Firmware · Schneider-electric
2.8 · source: NVD
BF
Bmxnoe0110h Firmware · Schneider-electric
2.8 · source: NVD
BF
Bmxnor0200h Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp341000 Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp342000 Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp3420102 Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp3420102cl Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp342020 Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp342020h Firmware · Schneider-electric
2.8 · source: NVD
MM
Modicon M340 Bmxp342030 Firmware · Schneider-electric
2.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6017
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6017
Third Party Advisory
http://www.securityfocus.com/bid/96414
Mitigation
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
www.schneider-electric.com
https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/
More from Bmxnoc0401 Firmware
9.8
CVE-2020-7540
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated…
9.8
CVE-2020-7533
CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP…
8.8
CVE-2020-7534
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server…
7.5
CVE-2021-22788
A CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an attacker sends a specially crafted HTTP request to the web server of the device
7.5
CVE-2021-22787
A CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request to the web server…