PT-2019-18368 · Schneider Electric · Modicon M580

CVE-2019-6830 · Publicado 2019-09-17 · Atualizado 2022-10-14

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.80

Description A vulnerability exists that could cause a possible denial of service when sending an appropriately timed HTTP request to the controller. This issue is related to an uncaught exception.

Recommendations For versions prior to V2.80, update to version V2.80 or later to resolve the issue.

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

CWE-248

Identificadores relacionados

CVE-2019-6830

Produtos afetados

Modicon M580

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6830 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6830 · Aviso do Fabricante