PT-2017-16845
CVE-2017-6030
·
تاريخ النشر
2017-06-30
·
تاريخ التحديث
2026-06-04
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Schneider Electric Modicon M221 versions prior to 1.5.0.0
Schneider Electric Modicon M241 versions prior to 4.0.5.11
Schneider Electric Modicon M251 versions prior to 4.0.5.11
Description
A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs. The affected products generate insufficiently random TCP initial sequence numbers, which may allow an attacker to predict the numbers from previous values. This could enable an attacker to spoof or disrupt TCP connections.
Recommendations
For Schneider Electric Modicon M221 versions prior to 1.5.0.0, update to version 1.5.0.0 or later.
For Schneider Electric Modicon M241 versions prior to 4.0.5.11, update to version 4.0.5.11 or later.
For Schneider Electric Modicon M251 versions prior to 4.0.5.11, update to version 4.0.5.11 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾