CVE-2017-11402

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.

• CWE-20

• https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txtThird Party Advisory
• https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdfVendor Advisory
• https://github.com/airbus-seclab/security-advisories/blob/master/belden/tofino.txtThird Party Advisory
• https://www.belden.com/hubfs/support/security/bulletins/Belden-Security-Bulletin-BSECV-2017-14-1v1-1.pdfVendor Advisory

Published

Nov 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11397A service DLL preloading vulnerability in Trend Micro Encryp…
• CVE-2017-11398A session hijacking via log disclosure vulnerability in Tren…
• CVE-2017-11399Integer overflow in the ape_decode_frame function in libavco…
• CVE-2017-1140IBM Business Process Manager 8.0 and 8.5 are vulnerable to c…
• CVE-2017-11400An issue has been discovered on the Belden Hirschmann Tofino…
• CVE-2017-11401An issue has been discovered on the Belden Hirschmann Tofino…
• CVE-2017-11403The ReadMNGImage function in coders/png.c in GraphicsMagick …
• CVE-2017-11404In CMS Made Simple (CMSMS) 2.2.2, remote authenticated admin…
• CVE-2017-11405In CMS Made Simple (CMSMS) 2.2.2, remote authenticated admin…
• CVE-2017-11406In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS …
• CVE-2017-11407In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ diss…
• CVE-2017-11408In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP di…