CVE-2017-6017

2017-06-3002:35:00

CWE-400

icscert

www.cve.org

0.004 Low

EPSS

Percentile

73.0%

JSON

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

CNA Affected

[
  {
    "product": "Schneider Electric Modicon M340 PLC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Schneider Electric Modicon M340 PLC"
      }
    ]
  }
]