PT-2019-2335 · Schneider Electric · Modicon M580+3
Jared Rittle
·
Publicado
2019-05-14
·
Atualizado
2022-02-03
·
CVE-2019-6808
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Modicon M580 (affected versions not specified)
Modicon M340 (affected versions not specified)
Modicon Quantum (affected versions not specified)
Modicon Premium (affected versions not specified)
Description
A remote code execution issue exists due to improper access control, which could allow an attacker to overwrite configuration settings of the controller using the Modbus protocol. This could potentially lead to arbitrary code execution.
Recommendations
For Modicon M580, update the firmware to a version that addresses the improper access control issue.
For Modicon M340, restrict access to the Modbus protocol until a patch is available.
For Modicon Quantum, consider disabling remote configuration capabilities via Modbus as a temporary workaround.
For Modicon Premium, avoid using the Modbus protocol for configuration changes until the issue is resolved.
As a general mitigation measure, restrict access to the Modbus protocol to minimize the risk of exploitation.
Exploit
Correção
Missing Authentication
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Modicon M340
Modicon M580
Modicon Premium
Modicon Quantum