CVE-2017-6017 HIGH

Published: 2017-06-30 | Last Modified: 2026-06-17 | Status: Modified

Description

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

Additional Descriptions (1)

Se ha descubierto un problema de agotamiento de recursos en Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H y BMXP342030H. Un atacante remoto podría enviar un conjunto de paquetes manipulados al PLC para congelarlo, lo que requeriría que el operador presionase físicamente el botón reset en el PLC para recuperarlo.

CVSS Metrics

Base Score: 7.8 (HIGH)

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-400
[email protected]	Primary	en CWE-400

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	bmxnoc0401_firmware	2.8	<built-in method update of dict object at 0x7e60a888e380>	Operating System
schneider-electric	bmxnoe0100_firmware	2.8	<built-in method update of dict object at 0x7e60b9fb4f40>	Operating System
schneider-electric	bmxnoe0110_firmware	2.8	<built-in method update of dict object at 0x7e60b9fb6fc0>	Operating System
schneider-electric	bmxnoe0110h_firmware	2.8	<built-in method update of dict object at 0x7e60a888f0c0>	Operating System
schneider-electric	bmxnor0200h_firmware	2.8	<built-in method update of dict object at 0x7e60a888c6c0>	Operating System
schneider-electric	modicon_m340_bmxp341000_firmware	2.8	<built-in method update of dict object at 0x7e60a888d740>	Operating System
schneider-electric	modicon_m340_bmxp342000_firmware	2.8	<built-in method update of dict object at 0x7e60e8859480>	Operating System
schneider-electric	modicon_m340_bmxp3420102_firmware	2.8	<built-in method update of dict object at 0x7e6112304900>	Operating System
schneider-electric	modicon_m340_bmxp3420102cl_firmware	2.8	<built-in method update of dict object at 0x7e60a888c340>	Operating System
schneider-electric	modicon_m340_bmxp342020_firmware	2.8	<built-in method update of dict object at 0x7e60a888ec00>	Operating System
schneider-electric	modicon_m340_bmxp342020h_firmware	2.8	<built-in method update of dict object at 0x7e6112305c80>	Operating System
schneider-electric	modicon_m340_bmxp342030_firmware	2.8	<built-in method update of dict object at 0x7e60a888fbc0>	Operating System
schneider-electric	modicon_m340_bmxp3420302_firmware	2.8	<built-in method update of dict object at 0x7e60a888ed00>	Operating System
schneider-electric	modicon_m340_bmxp3420302h_firmware	2.8	<built-in method update of dict object at 0x7e60eb219880>	Operating System
schneider-electric	modicon_m340_bmxp342030h_firmware	2.8	<built-in method update of dict object at 0x7e6107f38680>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoc0401_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoc0401:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoe0100_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoe0100:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoe0110_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoe0110:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnoe0110h_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnoe0110h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:bmxnor0200h_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:bmxnor0200h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102cl_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102cl:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020h_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302h_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302h:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342030h_firmware:2.8:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342030h:-:::::::*`

References

http://www.securityfocus.com/bid/96414
Source: [email protected]

Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
Source: [email protected]

Mitigation Third Party Advisory US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/
Source: [email protected]
http://www.securityfocus.com/bid/96414
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
Source: af854a3a-2127-422b-91ae-364da2661108

Mitigation Third Party Advisory US Government Resource
https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/
Source: af854a3a-2127-422b-91ae-364da2661108