PT-2017-4198 · Schneider Electric · Modicon M251+1

David Formby + 1 · Published 2017-03-30 · Updated 2022-02-03 · CVE-2017-6028

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Modicon M241 versions all firmware versions Modicon M251 versions all firmware versions

Description An issue was discovered where log-in credentials are sent over the network with Base64 encoding, leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application. This issue is related to insufficient protection of credentials, which could allow a remote attacker to intercept credentials and gain access to the web application.

Recommendations For Modicon M241, consider implementing additional security measures to protect log-in credentials, such as encryption or secure transmission protocols, until a patch is available. For Modicon M251, restrict access to the web application and consider using alternative authentication methods to minimize the risk of exploitation. As a temporary workaround, consider disabling remote access to the web application for both Modicon M241 and Modicon M251 until the issue is resolved.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

BDU:2022-04700

CVE-2017-6028

Affected Products

Modicon M241

Modicon M251

References · 8

• https://osv.dev/vulnerability/CVE-2017-6028 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6028 · Security Note
• https://bdu.fstec.ru/vul/2022-04700 · Security Note
• https://t.me/cvenotify/19770 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/ICSA-17-089-02 · Note
• https://fortiguard.com/zeroday/FG-VD-20-102 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 · Note
• http://securityfocus.com/bid/97254 · Note