CVE-2017-6017: High severity schneider-electric bmxnoc0401 vulnerability
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6017?
CVE-2017-6017 has been classified as a high severity vulnerability due to its potential for resource exhaustion and disruption of services.
How do I fix CVE-2017-6017?
To mitigate CVE-2017-6017, it is recommended to update the affected Schneider Electric Modicon M340 PLC firmware to the latest secure version.
What software versions are affected by CVE-2017-6017?
CVE-2017-6017 affects Schneider Electric Modicon M340 PLCs running firmware version 2.8.
What type of issues does CVE-2017-6017 cause?
CVE-2017-6017 can lead to resource exhaustion that affects the availability of the PLC, potentially causing service disruptions.
Is there a workaround for CVE-2017-6017?
Implementing network segmentation and monitoring for unusual traffic can help mitigate the risks posed by CVE-2017-6017 until a firmware update is applied.