CVE-2017-6028 Hardcoded credentials in Schneider Electric Modicon PLCs
Attackers can sniff Base64-encoded login credentials from network traffic to gain unauthorized access to the PLC web interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6028?
CVE-2017-6028 is a critical vulnerability in Schneider Electric Modicon PLCs, published on 30 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.
Weakness: CWE-522
Which versions are affected by CVE-2017-6028?
It affects 2 products.
Products include Schneider-Electric Modicon M241 Firmware, Schneider-Electric Modicon M251 Firmware.
How do I fix CVE-2017-6028?
No fix has been published for CVE-2017-6028 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-6028 being exploited?
There is no known exploitation of CVE-2017-6028 in the wild and no public exploit code.
Other vulnerabilities in Schneider Electric Modicon PLCs
Sources
Also known as GHSA-55h6-p6m7-f4h7.