CVE-2017-6034

—

CVSS 3.1

9.8 critical

EPSS

5%p92

Published

Jun 30, 2017 (Jun 30, 2017)

Modified

Jun 17, 2026

Description

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download.

Vendors: schneider-electric
Products: modbus firmware
Weakness: CWE-294, CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.2%)

In the news1 stories

ClearEnergy ransomware aim to destroy process automation logics in critical infrastructure, SCADA and industrial control systems.

Security AffairsOct 9, 21:51 UTC · Oct 9, 2020Ransomware CVE-2017-6032 CVE-2017-6034