Login Request a demo
Medium severity · published Jun 30, 2017
CVE-2017-6030
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241,…
6.5
CVSS
2.2%
EPSS
No
On KEV
Description
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Modicon M221 Firmware · Schneider-electric
through 1.1.1.5 · source: NVD
MM
Modicon M241 Firmware · Schneider-electric
through 4.0.3.20 · source: NVD
MM
Modicon M251 Firmware · Schneider-electric
through 4.0.3.20 · source: NVD
Affected product
MM
Modicon M221 Firmware
Schneider-electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6030
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6030
Third Party Advisory
http://www.securityfocus.com/bid/97254
github.com
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2017/icsa-17-089-02.json
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02
More from Modicon M221 Firmware
9.8
CVE-2020-7489
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or…
9.8
CVE-2018-7791
A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0)
9.8
CVE-2018-7790
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0)
8.2
CVE-2019-6820
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP…
7.5
CVE-2018-7821
An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle…