CVE-2017-6034: Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay
An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker must be able to capture Modicon Modbus protocol traffic containing sensitive information, then replay the captured commands. The affected commands include run, stop, upload, and download.
What could a successful replay attack allow?
A successful attacker may replay run or stop commands and upload or download commands. The vulnerability is rated critical with high impact to confidentiality, integrity, and availability.
How can an organization determine whether it is exposed?
Identify systems using Schneider Electric Modicon Modbus firmware and determine whether Modicon Modbus traffic carrying the listed commands can be observed or captured by an attacker. The issue arises because sensitive information is transmitted in cleartext in the protocol.