CVE-2017-6030

CWE-343CWE-3313 documents3 sources
Severity
6.5MEDIUM
EPSS
0.4%
top 39.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Schneider-electric Modicon M221 FirmwareSchneider-electric Modicon M241 FirmwareSchneider-electric Modicon M251 Firmware
Timeline
PublishedJun 30
Latest updateMay 13

Description

A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5

Affected Packages4 packages

▶CVEListV5schneider_electric_modicon_plcsSchneider Electric Modicon PLCs

🔴Vulnerability Details

2
GHSA
GHSA-w3r9-mwpj-g2c7: A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Versio↗2022-05-13
▶
CVEList
CVE-2017-6030: A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Versio↗2017-06-30
▶
CVE-2017-6030 (MEDIUM CVSS 6.5) | A Predictable Value Range from Prev | cvebase.io