Schneider Electric Modicon Modbus Protocol
ATTENTION: Remotely exploitable/low skill level to exploit.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-6034US | critical9.8OT elevated | — | ||
An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modb… | ||||
| CVE-2017-6032US | medium5.3 | — | ||
A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it sus… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationModicon Modbus protocol
Enable protection based on an authentication to connect to PLC. This method relies on a feature named Application Password. Once enabled, password-based authentication is required whenever a user connects to change their application program
- MitigationModicon Modbus protocol
Enable protection based on an authentication to connect to PLC. This method relies on a feature named Application Password. Once enabled, password-based authentication is required whenever a user connects to change their application program
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan