PT-2019-18366 · Schneider Electric · Modicon M580+3

Publicado 2019-09-17 · Atualizado 2022-02-03 · CVE-2019-6828

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.90 Modicon M340 versions prior to V3.10 Modicon Premium (affected versions not specified) Modicon Quantum (affected versions not specified)

Description A vulnerability exists that could cause a possible denial of service when reading specific coils and registers in the controller over Modbus. This issue is related to uncaught exceptions.

Recommendations For Modicon M580 versions prior to V2.90, update to version V2.90 or later. For Modicon M340 versions prior to V3.10, update to version V3.10 or later. For Modicon Premium and Modicon Quantum, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

CWE-248

Identificadores relacionados

CVE-2019-6828

Produtos afetados

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

Referências · 3

• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6828 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6828 · Aviso do Fabricante