CVE-2017-11401 — Tofino Xenon Security Appliance Firmware vulnerability

3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.1%
top 76.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Belden Tofino Xenon Security Appliance Firmware
Timeline
PublishedNov 20
Latest updateMay 13

Description

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-hm23-x227-wm9q: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03↗2022-05-13
▶
CVEList
CVE-2017-11401: An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03↗2017-11-20
▶
CVE-2017-11401 — CRITICAL severity | cvebase