[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f82pyN76ItfaB5vuHBVzGMfxPEaX327qjW1f1A3-D_Y8":3,"g5a-risk:CVE-2017-6028":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":76,"weaknessesCount":85,"isActivelyExploited":86,"cisaInfo":27,"otxData":27,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":137,"notableEvents":138},"CVE-2017-6028","What is CVE-2017-6028?","An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials could then be used to log into the web application.","An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all fi...","2017-06-30T03:29:00.36","2025-04-20T01:37:25.86",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.0225,[40,40,40,40,40,40,40],"Critical",[44,49,53,56],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"schneider-electric","modicon_m241_firmware","*","cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"modicon_m241","-","cpe:2.3:h:schneider-electric:modicon_m241:-:*:*:*:*:*:*:*",{"vendor":45,"product":54,"version":47,"criteria":55,"vulnerable":4},"modicon_m251_firmware","cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":57,"version":51,"criteria":58,"vulnerable":4},"modicon_m251","cpe:2.3:h:schneider-electric:modicon_m251:-:*:*:*:*:*:*:*",4,[61,67,72,74],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F97254","Securityfocus",[65,66],"Third Party Advisory","VDB Entry",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-17-089-02","Us-cert",[65,71],"US Government Resource",{"url":62,"source":63,"tags":73},[65,66],{"url":68,"source":69,"tags":75},[65,71],[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",1,false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2017-6028? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-6028, a critical severity cyber security vulnerability from 2017. An Insufficiently Protected Credentials issue was discov...","CVE-2017-6028, CVE-2017-6028 vulnerability, CVE-2017-6028 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, schneider-electric security, modicon_m241_firmware vulnerability, modicon_m241 vulnerability, modicon_m251_firmware vulnerability, modicon_m251 vulnerability","\u002Fwhat-is\u002Fcve-2017-6028",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-6028","Cybersecurity","CVE-2017-6028, CVE-2017-6028 vulnerability, CVE-2017-6028 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114,127],{"Operator":115,"Negate":27,"Nodes":116},"AND",[117,123],{"Operator":118,"Negate":27,"CPEMatch":119},"OR",[120],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":122},"9CA3FF3A-9145-4DAD-BAD6-D55C97E182AA","4.0.3.20",{"Operator":118,"Negate":27,"CPEMatch":124},[125],{"Vulnerable":27,"Criteria":52,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4D8FD9D9-F59F-470E-9F7F-CDDD80B0633C",{"Operator":115,"Negate":27,"Nodes":128},[129,133],{"Operator":118,"Negate":27,"CPEMatch":130},[131],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":122},"6FDB0710-FB7F-4346-9EEC-4C75ECEA0A1E",{"Operator":118,"Negate":27,"CPEMatch":134},[135],{"Vulnerable":27,"Criteria":58,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B8E03A25-B0B6-4BA2-80BC-52C16A6837E0",[],[],{"lastModified":11,"cacheTime":140,"version":33},1792490562953,{"score":142,"band":143,"action":144,"scoredAt":145},54,"Medium","Plan remediation","2026-10-20T06:39:22.822863+00:00"]