PT-2019-2333 · Schneider Electric · Modicon M580+3

Publicado 2019-05-14 · Atualizado 2022-02-03 · CVE-2019-6806

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Modicon M580 (affected versions not specified) Modicon M340 (affected versions not specified) Modicon Quantum (affected versions not specified) Modicon Premium (affected versions not specified)

Description The issue is related to the disclosure of information. Exploitation of this issue may allow a remote attacker to access confidential SNMP protocol information when reading variables in the controller using the Modbus protocol.

Recommendations For Modicon M580, update to a version that fixes the information exposure issue. For Modicon M340, update to a version that fixes the information exposure issue. For Modicon Quantum, update to a version that fixes the information exposure issue. For Modicon Premium, update to a version that fixes the information exposure issue. As a temporary workaround, consider restricting access to the Modbus protocol to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-02108

CVE-2019-6806

Produtos afetados

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

Referências · 6

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0769 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6806 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Aviso do Fabricante
• https://t.me/cvenotify/26224 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-6806 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02108 · Nota de Segurança