CVE-2017-6026
Schneider Electric PLC - Session Calculation Authentication Bypass
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.
Un problema de uso de valores aleatorios insuficientes fue encontrado en Schneider Electric Modicon PLCs Modicon M241, versiones de firmware anteriores a 4.0.5.11, y Modicon M251, versiones de firmware anteriores a 4.0.5.11. Los números de sesión generados por la aplicación web carecen de aleatorización y son compartidos entre varios usuarios. Esto puede permitir que una sesión actual se vea comprometida.
Schneider Electric PLC suffers from a session calculation authentication bypass vulnerability.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-02-16 CVE Reserved
- 2017-06-30 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2024-11-06 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-330: Use of Insufficiently Random Values
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/97254 | Third Party Advisory | |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/45918 | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Modicon M251 Firmware Search vendor "Schneider-electric" for product "Modicon M251 Firmware" | <= 4.0.3.20 Search vendor "Schneider-electric" for product "Modicon M251 Firmware" and version " <= 4.0.3.20" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M251 Search vendor "Schneider-electric" for product "Modicon M251" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Modicon M241 Firmware Search vendor "Schneider-electric" for product "Modicon M241 Firmware" | <= 4.0.3.20 Search vendor "Schneider-electric" for product "Modicon M241 Firmware" and version " <= 4.0.3.20" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Modicon M241 Search vendor "Schneider-electric" for product "Modicon M241" | - | - |
Safe
|