Schneider Electric Modicon Modbus Protocol Multiple Authentication Bypass Vulnerabilities

Schneider Electric Modicon Modbus Protocol is prone to multiple authentication-bypass vulnerabilities.

An attacker can exploit these issues to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.

Information

Bugtraq ID: 97562
Class: Design Error
CVE: CVE-2017-6034
CVE-2017-6032

Remote: Yes
Local: No
Published: Apr 11 2017 12:00AM
Updated: Apr 11 2017 12:00AM
Credit: Eran Goldstein of CRITIFENCE
Vulnerable: Schneider-Electric Modicon Modbus Protocol 0

Not Vulnerable:

References:

• Schneider Electric Homepage (Schneider Electric)
  
• Advisory (ICSA-17-101-01) Schneider Electric Modicon Modbus Protocol (cert.us)
  

Source: www.securityfocus.com