CVE-2017-6034

An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/97562	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01	Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/97562	Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:schneider-electric:modbus_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:schneider-electric:modbus:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:28

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/97562 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/97562 - Third Party Advisory, VDB Entry
References	~~() https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 - US Government Resource, Third Party Advisory~~	() https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 - Third Party Advisory, US Government Resource

Information

Published : 2017-06-30 03:29

Updated : 2024-11-21 03:28

NVD link : CVE-2017-6034

Mitre link : CVE-2017-6034

CVE.ORG link : CVE-2017-6034

JSON object : View

Products Affected

schneider-electric

modbus_firmware
modbus

CWE

CWE-294

Authentication Bypass by Capture-replay

CWE-287

Improper Authentication

{"id": "CVE-2017-6034", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2017-06-30T03:29:00.453", "references": [{"url": "http://www.securityfocus.com/bid/97562", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "http://www.securityfocus.com/bid/97562", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-294"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download."}, {"lang": "es", "value": "Se ha descubierto un problema de omisi\u00f3n de autenticaci\u00f3n por captura por reproducci\u00f3n en el protocolo Modicon Modbus, de Schneider Electric. Se transmite informaci\u00f3n sensible en texto claro en el protocolo Modicon Modbus, lo que podr\u00eda permitir que un atacante reproduzca los siguientes comandos: run, stop, upload y download."}], "lastModified": "2024-11-21T03:28:56.933", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:modbus_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDF59532-F8A6-4EFC-9B65-7FE1C37B6222"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:modbus:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B98D3886-8E25-44A6-9BA0-97274DBE4D39"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}