CVE-2017-11401 - An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00

CVE-2017-11401

Summary

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering.

References

https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf

Vulnerable Configurations

cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:belden:tofino_xenon_security_appliance:-:*:*:*:*:*:*:*
cpe:2.3:h:belden:tofino_xenon_security_appliance:-:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

misc

https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txt
https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdf

Last major update

03-10-2019 - 00:03

Published

20-11-2017 - 15:29

Last modified

03-10-2019 - 00:03