1. Home
  2. CVE Database
  3. CVE-2017-6030
MEDIUM · 6.5

CVE-2017-6030

A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior t...

Vulnerability Description

A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Schneider-ElectricModicon M241 Firmware<= 4.0.3.20
Schneider-ElectricModicon M241-
Schneider-ElectricModicon M251 Firmware<= 4.0.3.20
Schneider-ElectricModicon M251-
Schneider-ElectricModicon M221 Firmware<= 1.1.1.5
Schneider-ElectricModicon M221-

Related Weaknesses (CWE)

CWE-331CWE-343

References

FAQ

What is CVE-2017-6030?

CVE-2017-6030 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior t...

How severe is CVE-2017-6030?

CVE-2017-6030 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-6030?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Modicon M241 Firmware, Schneider-Electric Modicon M241, Schneider-Electric Modicon M251 Firmware, Schneider-Electric Modicon M251, Schneider-Electric Modicon M221 Firmware.