ID
VAR-201611-0407
TITLE
Schneider 140NOE77101 Ethernet Module Has Land Attack Vulnerability
Trust: 0.6
DESCRIPTION
40NOE77101 is an Ethernet communication module for Schneider's Quantum series PLC. The Schneider 140NOE77101 Ethernet module's TCP / IP protocol stack has a Land attack vulnerability. As the program sends a TCP SYN packet with the same source and destination IP (both the IP address of the 140NOE7710 module) to the 140NOE7710 module at a rate greater than 15kpps, the attacker can use The vulnerability can cause the module protocol stack to crash and the system to become unresponsive. The module needs to be powered off and restarted to return to normal
Trust: 0.72
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.8 |
AFFECTED PRODUCTS
| vendor: | schneider | model: | electric 140noe77101 modular system | scope: | eq | version: | 6.7 | Trust: 0.6 |
| vendor: | schneider | model: | electric 140noe77101 module system | scope: | eq | version: | 6.7 | Trust: 0.2 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Resource management error
Trust: 0.2
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2016-11364 | Trust: 0.8 |
| db: | IVD | id: | 0124FB21-6081-4D83-A7AB-E6AA76455173 | Trust: 0.2 |
SOURCES
| db: | IVD | id: | 0124fb21-6081-4d83-a7ab-e6aa76455173 |
| db: | CNVD | id: | CNVD-2016-11364 |
LAST UPDATE DATE
2022-05-17T02:07:06.685000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2016-11364 | date: | 2016-11-24T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | 0124fb21-6081-4d83-a7ab-e6aa76455173 | date: | 2016-11-21T00:00:00 |
| db: | CNVD | id: | CNVD-2016-11364 | date: | 2016-12-29T00:00:00 |