Modicon Modbus/TCP UnityPro Programming Function Code Access

Medium Nessus Plugin ID 97436

Synopsis

A Modicon PLC Modbus TCP interface is listening on TCP port 502 and is accessible via the Schneider Electric UnityPro function code 90.

Description

A Modicon PLC Modbus TCP interface is listening on TCP port 502 and is accessible via the Schneider Electric UnityPro function code 90. An attacker that is able to gain network access to this device can reprogram PLC logic or otherwise impact the integrity of the device.

Solution

Restrict incoming traffic on this port to authorized Modbus TCP clients.

Plugin Details

Severity: Medium

ID: 97436

File Name: scada_modbus_modicon_project.nbin

Version: $Revision: 1.11 $

Type: remote

Family: SCADA

Published: 2017/02/28

Modified: 2018/05/21

Dependencies: 83301

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSSv3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Vulnerability Information

Required KB Items: SCADA/modbus/Vendor Name, Settings/ThoroughTests