CVE-2017-6030

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon M221 versions prior to 1.5.0.0 Schneider Electric Modicon M241 versions prior to 4.0.5.11 Schneider Electric Modicon M251 versions prior to 4.0.5.11

Description A Predictable Value Range from Previous Values issue was discovered in Schneider Electric Modicon PLCs. The affected products generate insufficiently random TCP initial sequence numbers, which may allow an attacker to predict the numbers from previous values. This could enable an attacker to spoof or disrupt TCP connections.

Recommendations For Schneider Electric Modicon M221 versions prior to 1.5.0.0, update to version 1.5.0.0 or later. For Schneider Electric Modicon M241 versions prior to 4.0.5.11, update to version 4.0.5.11 or later. For Schneider Electric Modicon M251 versions prior to 4.0.5.11, update to version 4.0.5.11 or later.