CVE-2017-6017

Published: Jun 30, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

Affected (15)

Products: Schneider Electric: Bmxnoc0401 Firmware, Bmxnoe0100 Firmware, Bmxnoe0110 Firmware, Bmxnoe0110h Firmware, Bmxnor0200h Firmware, Modicon M340 Bmxp341000 Firmware, Modicon M340 Bmxp342000 Firmware, Modicon M340 Bmxp3420102 Firmware, Modicon M340 Bmxp3420102cl Firmware, Modicon M340 Bmxp342020 Firmware, Modicon M340 Bmxp342020h Firmware, Modicon M340 Bmxp342030 Firmware, Modicon M340 Bmxp3420302 Firmware, Modicon M340 Bmxp3420302h Firmware, Modicon M340 Bmxp342030h Firmware

15 products

Modicon M340 Bmxp341000 Firmware

Modicon M340 Bmxp342000 Firmware

Modicon M340 Bmxp3420102 Firmware

Modicon M340 Bmxp3420102cl Firmware

Modicon M340 Bmxp342020 Firmware

Modicon M340 Bmxp342020h Firmware

Modicon M340 Bmxp342030 Firmware

Modicon M340 Bmxp3420302 Firmware

Modicon M340 Bmxp3420302h Firmware

Modicon M340 Bmxp342030h Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnoc0401 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Bmxnoc0401	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnoe0100 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Bmxnoe0100	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnoe0110 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Bmxnoe0110	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnoe0110h Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Bmxnoe0110h	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Bmxnor0200h Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Bmxnor0200h	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp341000 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp341000	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342000 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342000	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420102cl Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420102cl	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342020h Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342020h	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302 Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp3420302h Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp3420302h	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Schneider Electric Modicon M340 Bmxp342030h Firmware	Version 2.8

Running on/with	Platform Versions
Schneider Electric Modicon M340 Bmxp342030h	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (6)

http://www.securityfocus.com/bid/96414

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/

Source: ics-cert@hq.dhs.gov

http://www.securityfocus.com/bid/96414

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.