PT-2017-16845 · Schneider Electric · Modicon M221+2

David Formby + 1 · Publicado 2017-06-30 · Atualizado 2026-06-04 · CVE-2017-6030

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon M221 versions prior to 1.5.0.0 Schneider Electric Modicon M241 versions prior to 4.0.5.11 Schneider Electric Modicon M251 versions prior to 4.0.5.11

Description A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs. The affected products generate insufficiently random TCP initial sequence numbers, which may allow an attacker to predict the numbers from previous values. This could enable an attacker to spoof or disrupt TCP connections.

Recommendations For Schneider Electric Modicon M221 versions prior to 1.5.0.0, update to version 1.5.0.0 or later. For Schneider Electric Modicon M241 versions prior to 4.0.5.11, update to version 4.0.5.11 or later. For Schneider Electric Modicon M251 versions prior to 4.0.5.11, update to version 4.0.5.11 or later.

Correção

Enumeração de Fraquezas

CWE-343

CWE-331

Identificadores relacionados

CVE-2017-6030

Produtos afetados

Modicon M221

Modicon M241

Modicon M251

Referências · 7

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2017/icsa-17-089-02.json · Nota
• https://t.me/cveNotify/166089 · Publicação no Telegram
• https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 · Nota
• https://t.me/cveNotify/165192 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-6030 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6030 · Aviso do Fabricante
• http://securityfocus.com/bid/97254 · Nota