CVE-2017-11401: Belden Tofino Xenon Security Appliance Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.

Affected products

• Belden Tofino Xenon Security Appliance Firmware: up to and including 3.1.0

Published 2017-11-20. Last modified 2026-06-17.