CVE-2017-6030 - CVE House
Back to Database
Status published Unknown CVE-2017-6030

Schneider Electric Modicon PLCs Predictable Value Range from Previous Values

Vulnerability Description

A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected products generate insufficiently random TCP initial sequence numbers that may allow an attacker to predict the numbers from previous values. This may allow an attacker to spoof or disrupt TCP connections.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6030

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • David Formby and Raheem Beyah of Georgia Tech and Fortiphyd Logic, Inc. reported the identified vulnerabilities.

References

More from Schneider Electric

View All →
CVE-2025-9997
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium 5.8
CVE-2025-9996
CWE-78: Improper Neutralization of Special Elements used in an OS...
Medium 5.8
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege...
High 8.4
CVE-2025-7746
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...
Medium 5.3
CVE-2025-6788
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists...
Medium 5.3

Affected Vendor

Schneider Electric

View all reports →

Affected Software

Modicon M221, Modicon M241, Modicon M251
Vulnerable Versions:
0

Timeline

Official Publish: June 30th, 2017
Last Modified: June 4th, 2026
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-343

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.