CVE-2017-6017

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-30 · updated 2026-06-17
Weakness: CWE-400

Description

A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially crafted set of packets to the PLC causing it to freeze, requiring the operator to physically press the reset button on the PLC in order to recover.

Affected products

Schneider-Electric Bmxnoc0401 Firmware: 2.8
Schneider-Electric Bmxnoe0100 Firmware: 2.8
Schneider-Electric Bmxnoe0110 Firmware: 2.8
Schneider-Electric Bmxnoe0110H Firmware: 2.8
Schneider Electric SE BMXNOR0200H Ethernet / Serial RTU module: 2.8
Schneider-Electric Modicon M340 Bmxp341000 Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp342000 Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp3420102 Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp3420102Cl Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp342020 Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp342020H Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp3420302 Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp3420302H Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp342030 Firmware: 2.8
Schneider-Electric Modicon M340 Bmxp342030H Firmware: 2.8

References

http://www.securityfocus.com/bid/96414
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/
http://www.securityfocus.com/bid/96414
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-03
https://www.schneider-electric.com/en/download/document/SEVD-2017-048-02/

Get alerted when CVE-2017-6017 or the next vulnerability affects your stack