{"id":"CVE-2017-6026","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-6026","generatedAt":"2026-10-29T01:49:00.076Z","title":"This may allow a current session to be compromised.","description":"A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.","published":"2017-06-30T03:29:00.000Z","lastModified":"2026-06-17T01:21:39.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.1","score":9.1,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"},"cwe":["CWE-330"],"affected":["schneider-electric/modicon m251 firmware","schneider-electric/modicon m241 firmware"],"epss":{"score":0.3182,"percentile":0.98291,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-11-30","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45918,"kind":"exploit","title":"Schneider Electric PLC - Session Calculation Authentication Bypass","url":"https://www.exploit-db.com/exploits/45918","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/webapps/45918.py","file":"exploits/hardware/webapps/45918.py","published":"2018-11-30","added":"2018-11-30","updated":"2018-11-30","author":"Photubias","type":"webapps","platform":"hardware","port":80,"verified":false,"codes":["CVE-2017-6026"],"tags":"Authentication Bypass / Credentials Bypass (AB/CB)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 31.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/97254","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02","tags":["Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.exploit-db.com/exploits/45918/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/97254","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-089-02","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45918/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6026","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}