Schneider Electric Modicon M340 PLC (Update A)
Advisory ansehen veröffentlicht 2017-02-23
Successful exploitation of this vulnerability may render the device unresponsive requiring a physical reset of the PLC.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-6017US | high7.5 | — | ||
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102,… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-17-054-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (5)
- MitigationM1E CPUs
Set up a firewall blocking all remote/external access to Port 502
- MitigationM340 CPUs with firmware
Set up a firewall blocking all remote/external access to Port 502
- MitigationM580 CPUs with firmware
Set up a firewall blocking all remote/external access to Port 502
- MitigationPremium CPUs
Set up a firewall blocking all remote/external access to Port 502
- MitigationQuantum CPUs with firmware
Set up a firewall blocking all remote/external access to Port 502
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan