ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-6017

—
CVSS 3.0
7.5 high
EPSS
5%p91
Published
()
Modified
Description

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

Vendors
schneider-electric
Products
bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware, bmxnoe0110h firmware, bmxnor0200h firmware, modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware, modicon m340 bmxp3420102cl firmware, modicon m340 bmxp342020 firmware, modicon m340 bmxp342020h firmware, modicon m340 bmxp342030 firmware
Weakness
CWE-400
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (4.8%)

In the news

No ingested article mentions this CVE yet.