Schneider Electric Modbus Firmware vulnerabilities

2 CVEs affecting Schneider Electric Modbus Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6034, published 2017-06-30.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-6034, published 2017-06-30. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which…
• CVE-2017-6032, published 2017-06-30. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to…