A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-force attacks.
The product violates well-established principles for secure design.
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
Link | Tags |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-17-101-01 | third party advisory us government resource |
http://www.securityfocus.com/bid/97562 | third party advisory vdb entry |