CVE-2017-6030 Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
Attackers can predict TCP sequence numbers to spoof or disrupt connections on Schneider Electric Modicon PLCs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6030?
CVE-2017-6030 is a medium-severity vulnerability in Schneider Electric Modicon M221, published on 30 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.
Which versions are affected by CVE-2017-6030?
It affects 3 products.
Products include Schneider-Electric Modicon M221 Firmware, Schneider-Electric Modicon M241 Firmware, Schneider-Electric Modicon M251 Firmware.
How do I fix CVE-2017-6030?
No fix has been published for CVE-2017-6030 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-6030 being exploited?
There is no known exploitation of CVE-2017-6030 in the wild and no public exploit code.
Other vulnerabilities in Schneider Electric Modicon M221
- CVE-2020-28214 Weak cryptography in Modicon M221 (all references, all versions)
- CVE-2018-7790 Auth bypass in Modicon M221, all references, all versions prior to firmware V1.6.2.0
- CVE-2018-7791 Auth bypass in Modicon M221, all references, all versions prior to firmware V1.6.2.0
- CVE-2018-7821 Denial of service in SoMachine Basic and Modicon M221, SoMachine Basic, all versions Modicon M221, all references, all versions prior to firmware V1.10.0.0
- CVE-2018-7792 Weak cryptography in Modicon M221, all references, all versions prior to firmware V1.6.2.0
Sources
Also known as GHSA-w3r9-mwpj-g2c7.