CVE-2019-6819
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium.
Affected (4)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.01 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Modicon M340 Bmxp341000 | All versions |
Schneider Electric Modicon M340 Bmxp341000h | All versions |
Schneider Electric Modicon M340 Bmxp342000 | All versions |
Schneider Electric Modicon M340 Bmxp3420102 | All versions |
Schneider Electric Modicon M340 Bmxp3420102cl | All versions |
Schneider Electric Modicon M340 Bmxp342020 | All versions |
Schneider Electric Modicon M340 Bmxp342020h | All versions |
Schneider Electric Modicon M340 Bmxp3420302 | All versions |
Schneider Electric Modicon M340 Bmxp3420302cl | All versions |
Schneider Electric Modicon M340 Bmxp3420302h | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.80 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Bmeh582040 | All versions |
Schneider Electric Bmeh582040c | All versions |
Schneider Electric Bmeh584040 | All versions |
Schneider Electric Bmeh584040c | All versions |
Schneider Electric Bmeh586040 | All versions |
Schneider Electric Bmeh586040c | All versions |
Schneider Electric Modicon M580 Bmep581020 | All versions |
Schneider Electric Modicon M580 Bmep581020h | All versions |
Schneider Electric Modicon M580 Bmep582020 | All versions |
Schneider Electric Modicon M580 Bmep582020h | All versions |
Schneider Electric Modicon M580 Bmep582040 | All versions |
Schneider Electric Modicon M580 Bmep582040h | All versions |
Schneider Electric Modicon M580 Bmep582040s | All versions |
Schneider Electric Modicon M580 Bmep583020 | All versions |
Schneider Electric Modicon M580 Bmep583040 | All versions |
Schneider Electric Modicon M580 Bmep584020 | All versions |
Schneider Electric Modicon M580 Bmep584040 | All versions |
Schneider Electric Modicon M580 Bmep584040s | All versions |
Schneider Electric Modicon M580 Bmep585040 | All versions |
Schneider Electric Modicon M580 Bmep585040c | All versions |
Schneider Electric Modicon M580 Bmep586040 | All versions |
Schneider Electric Modicon M580 Bmep586040c | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Modicon Quantum | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Modicon Premium | All versions |
References (4)
Source: cybersecurity@se.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.