CVE-2017-7575

CVE-2017-7575 is a critical vulnerability affecting Schneider Electric Modicon TM221CE16R devices, specifically firmware version 1.3.3.3. This flaw allows remote attackers to bypass application protection by sending a specially crafted request to the Modbus port (502/tcp), enabling the discovery of the application-protection password. Successful exploitation grants attackers the ability to arbitrarily download, modify, and upload the device's application. With a CVSSv3 score of 9.8 (Critical), this vulnerability has a network attack vector, low attack complexity, and requires no user interaction or privileges, leading to high impacts on confidentiality, integrity, and availability. The EPSS score of 0.03375 indicates a low probability of exploitation in the wild, despite its high severity. Currently, there is no known active exploitation in the wild, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security researchers.