Skip to content
OpenAdvisories
High ICSA-17-089-02 3 CVEs

Schneider Electric Modicon PLCs

Published Mar 30, 2017 · Updated Mar 30, 2017

Vendor: Schneider Electric Product: Modicon M221 Product: Modicon M241 Product: Modicon M251

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

  • Medium 6.5
    CVE-2017-6030

    Schneider Electric Modicon PLCs Predictable Value Range from Previous Values

    A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions pri…

    Schneider Electric Modicon M221 Modicon M251 Modicon M241 ICS / OT
  • Unscored —
    CVE-2017-6026 Public exploit EPSS 32%

    A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ve…

  • Unscored —
    CVE-2017-6028

    An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmw…

Revision history

  1. #1

    ICSA-17-089-02 Schneider Electric Modicon PLCs

References