PT-2017-3786 · Schneider Electric · Modicon Modbus Protocol

Published 2017-04-11 · Updated 2026-05-28 · CVE-2017-6034

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon Modbus Protocol (affected versions not specified)

Description An Authentication Bypass by Capture-Replay issue was discovered, where sensitive information is transmitted in cleartext in the Modicon Modbus protocol. This may allow an attacker to replay certain commands, including run, stop, upload, and download. The issue is related to the transmission of confidential information in an unencrypted form, which can be exploited by a remote attacker to execute commands on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-294

Related Identifiers

BDU:2019-02550

CVE-2017-6034

Affected Products

Modicon Modbus Protocol

References · 7

• https://bdu.fstec.ru/vul/2019-02550 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-6034 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2017/icsa-17-101-01.json · Note
• https://t.me/cveNotify/165097 · Telegram Post
• https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 · Note
• http://securityfocus.com/bid/97562 · Note
• https://se.com/us/en/download/document/SEVD-2017-065-01 · Note