Modicon Modbus/TCP UnityPro Programming Function Code Access

medium Nessus Plugin ID 97436

Language:

Synopsis

A Modicon PLC Modbus TCP interface is listening on TCP port 502 and is accessible via the Schneider Electric UnityPro function code 90.

Description

A Modicon PLC Modbus TCP interface is listening on TCP port 502 and is accessible via the Schneider Electric UnityPro function code 90. An attacker that is able to gain network access to this device can reprogram PLC logic or otherwise impact the integrity of the device.

Solution

Restrict incoming traffic on this port to authorized Modbus TCP clients.

Plugin Details

Severity: Medium

ID: 97436

File Name: scada_modbus_modicon_project.nbin

Version: 1.50

Type: remote

Family: SCADA

Published: 2/28/2017

Updated: 5/31/2023

Configuration: Enable thorough checks

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Vulnerability Information

Required KB Items: Settings/ThoroughTests, SCADA/modbus/Vendor Name