CVE-2017-11401
published 2017-11-20CVE-2017-11401: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus…
PriorityP347critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.40%
69.2th percentile
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| belden | tofino_xenon_security_appliance_firmware | < 03.2.03 | 03.2.03 |
| belden | tofino_xenon_security_appliance_firmware | <= 3.1.0 | — |
| schneider-electric | tcsefea23f3f22_firmware | < 03.23 | 03.23 |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hm23-x227-wm9q: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03
ghsa_unreviewed·2022-05-13
CVE-2017-11401 [CRITICAL] GHSA-hm23-x227-wm9q: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.
GHSA
GHSA-264c-27mg-g32w: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03
ghsa_unreviewed·2022-04-05·CVSS 9.8
CVE-2021-30065 [CRITICAL] GHSA-264c-27mg-g32w: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txthttps://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdfhttps://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txthttps://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf
2017-11-20
Published