PT-2017-16836 · Schneider Electric · Conext Combox

Arik Kublanov + 1 · Published 2017-04-07 · Updated 2017-08-16 · CVE-2017-6019

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Schneider Electric Conext ComBox versions prior to V3.03 BN 830

Description An issue was discovered that may cause the device to reboot after a series of rapid requests.

Recommendations For versions prior to V3.03 BN 830, update to version V3.03 BN 830 or later to resolve the issue.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2017-6019

Affected Products

Conext Combox

References · 6

• 🔥 https://exploit-db.com/exploits/41537 · Exploit
• https://osv.dev/vulnerability/CVE-2017-6019 · Vendor Advisory
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2017-052-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6019 · Security Note
• http://securityfocus.com/bid/96543 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-061-02 · Note