Skip to content
Sign in
Not rated

CVE-2017-6028 An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all…

Description

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.

Affected products and versions

Product Affected versions Fixed in
Schneider Electric Modicon PLCs Versions not published

Other CVEs of Schneider Electric Modicon PLCs

The 3 CVEs of Schneider Electric Modicon PLCs →
CVE-2017-6026 A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware… Not rated CVE-2017-6030 A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221,… 6.5 Medium
Track this CVE