← Back

CVE-2019-6820

nvd nist
Published: May 22, 2019Modified: May 28, 2026

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Exploitability: 3.9 / Impact: 4.2
Source: NVD

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2

Affected (12)

Schneider Electric
12 products
Modicon M100 Firmware
Modicon M200 Firmware
Modicon M221 Firmware
Atv Imc Drive Controller Firmware
Modicon M241 Firmware
Modicon M251 Firmware
Modicon M258 Firmware
Modicon Lmc058 Firmware
Modicon Lmc078 Firmware
Pacdrive Eco Firmware
Pacdrive Pro Firmware
Pacdrive Pro2 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M100 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M100
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M200 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M200
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M221 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M221
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Atv Imc Drive Controller Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Atv Imc Drive Controller
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M241 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M241
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M251 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M251
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon M258 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon M258
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon Lmc058 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon Lmc058
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Modicon Lmc078 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Modicon Lmc078
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pacdrive Eco Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Pacdrive Eco
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pacdrive Pro Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Pacdrive Pro
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Pacdrive Pro2 Firmware
All versions
Running on/withPlatform Versions
Schneider Electric
Pacdrive Pro2
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

Source: cybersecurity@se.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.