Schneider Electric Modicon M340 PLC (Update A)
view advisory published 2017-02-23
Successful exploitation of this vulnerability may render the device unresponsive requiring a physical reset of the PLC.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-6017US | high7.5 | — | ||
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102,… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-17-054-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (5)
- MitigationM1E CPUs
Set up a firewall blocking all remote/external access to Port 502
- MitigationM340 CPUs with firmware
Set up a firewall blocking all remote/external access to Port 502
- MitigationM580 CPUs with firmware
Set up a firewall blocking all remote/external access to Port 502
- MitigationPremium CPUs
Set up a firewall blocking all remote/external access to Port 502
- MitigationQuantum CPUs with firmware
Set up a firewall blocking all remote/external access to Port 502
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan