CVE-2017-6030CWE-343

Schneider Electric Modicon PLCs Predictable Value Range from Previous Values

Medium · published June 30, 2017

CVSS v3.1
6.5
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.02142 · 81.8th percentile
Weakness
CWE-343 · Predictable Value Range from Previous Values
Published
2017-06-30T02:35Z
EPSS history
Timeline
  • 30 JUN 02:35Z
    Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
    cvelistv5