[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO1FCZfUpov7y2bIIJAC3kIUieuWvBzBG9Wv81HlDJZs":3,"g5a-risk:CVE-2017-6026":156},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":59,"references":60,"referencesCount":83,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":27,"otxData":27,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":145,"notableEvents":146},"CVE-2017-6026","What is CVE-2017-6026?","A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The session numbers generated by the web application are lacking randomization and are shared between several users. This may allow a current session to be compromised.","A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and ...","2017-06-30T03:29:00.327","2025-04-20T01:37:25.86",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,"MEDIUM",10,4.9,0.3182,[40,40,40,40,40,40,40],"Critical",[44,49,53,56],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"schneider-electric","modicon_m251_firmware","*","cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"modicon_m251","-","cpe:2.3:h:schneider-electric:modicon_m251:-:*:*:*:*:*:*:*",{"vendor":45,"product":54,"version":47,"criteria":55,"vulnerable":4},"modicon_m241_firmware","cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":57,"version":51,"criteria":58,"vulnerable":4},"modicon_m241","cpe:2.3:h:schneider-electric:modicon_m241:-:*:*:*:*:*:*:*",4,[61,67,72,77,79,81],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F97254","Securityfocus",[65,66],"Third Party Advisory","VDB Entry",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-17-089-02","Us-cert",[65,71],"US Government Resource",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45918\u002F","Exploit-db",[76,65,66],"Exploit",{"url":62,"source":63,"tags":78},[65,66],{"url":68,"source":69,"tags":80},[65,71],{"url":73,"source":74,"tags":82},[76,65,66],6,[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","When product generates predictable values in a context requiring unpredictability, it may be possible for an attacker to guess the next value that will be generated, and use this guess to impersonate another user or access sensitive information.","Stable","Class","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2017-6026? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-6026, a critical severity cyber security vulnerability from 2017. High exploit probability (31.8%). A Use of Insufficientl...","CVE-2017-6026, CVE-2017-6026 vulnerability, CVE-2017-6026 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, schneider-electric security, modicon_m251_firmware vulnerability, modicon_m251 vulnerability, modicon_m241_firmware vulnerability, modicon_m241 vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2017-6026",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-6026","Cybersecurity","CVE-2017-6026, CVE-2017-6026 vulnerability, CVE-2017-6026 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,135],{"Operator":123,"Negate":27,"Nodes":124},"AND",[125,131],{"Operator":126,"Negate":27,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":130},"6FDB0710-FB7F-4346-9EEC-4C75ECEA0A1E","4.0.3.20",{"Operator":126,"Negate":27,"CPEMatch":132},[133],{"Vulnerable":27,"Criteria":52,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B8E03A25-B0B6-4BA2-80BC-52C16A6837E0",{"Operator":123,"Negate":27,"Nodes":136},[137,141],{"Operator":126,"Negate":27,"CPEMatch":138},[139],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":130},"9CA3FF3A-9145-4DAD-BAD6-D55C97E182AA",{"Operator":126,"Negate":27,"CPEMatch":142},[143],{"Vulnerable":27,"Criteria":58,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4D8FD9D9-F59F-470E-9F7F-CDDD80B0633C",[],[147],{"id":148,"eventType":149,"eventTime":150,"details":151,"label":152,"color":153},"fd75ab21-8665-43e7-a483-adc2b5543a30","HIGH_EPSS_DELTA","2026-06-16T04:06:21.597775+00:00","Daily EPSS score increased by 0.171 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":155,"version":33},1792494041609,{"score":157,"band":158,"action":159,"scoredAt":160},52,"Medium","Plan remediation","2026-10-20T06:39:22.822621+00:00"]