cbcvebase.
CVE-2017-6019
published 2017-04-07

CVE-2017-6019: An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the…

PriorityP261high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EXPLOIT
EPSS
36.94%
98.3th percentile
An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the device may cause it to reboot.

Affected

1 ranges
VendorProductVersion rangeFixed in
schneider-electricconext_combox_865-1058_firmware<= 3.03—

Detection & IOCsextracted from sources · hover to see the quote

path/login.cgi↗
  • →Detect rapid repeated HTTP POST requests to /login.cgi on the target device; 1000 iterations in a tight loop are used to trigger the DoS reboot condition. ↗
  • →Google dork can be used to identify exposed Conext ComBox devices on the internet: search for 'Conext ComBox' combined with 'JavaScript was not detected' or 'Recover Lost Password'. ↗
  • ·All firmware versions prior to V3.03 BN 830 are vulnerable; patched firmware is V3.03 BN 830 or later. ↗
  • ·The vulnerability is remotely exploitable with no authentication and requires low skill level; devices should not be exposed to the internet. ↗

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.