Improper Handling of ModBus Packets in Belden Hirschmann Tofino Xenon Security Appliance
CVE-2017-11401

9.8CRITICAL

Key Information:

Vendor

Belden

Status
Tofino Xenon Security Appliance Firmware
Vendor
CVE Published:
20 November 2017

What is CVE-2017-11401?

The Belden Hirschmann Tofino Xenon Security Appliance has a vulnerability due to improper management of the mbap.length field within ModBus packets while utilizing the ModBus DPI filter. This flaw allows an attacker to craft malformed packets that can bypass established function code filtering, thereby potentially exposing protected assets to unauthorized access.

References

https://www.belden.com/hubfs/support/security/bulletins/B...
x_refsource_MISC
https://github.com/airbus-seclab/security-advisories/blob...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.