PT-2019-18364 · Schneider Electric · Modicon M580+3

Published 2019-09-17 · Updated 2022-02-03 · CVE-2019-6809

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.90 Modicon M340 versions prior to V3.10 Modicon Premium (affected versions not specified) Modicon Quantum (affected versions not specified)

Description A denial of service issue exists due to an uncaught exception when reading invalid data from the controller.

Recommendations For Modicon M580 versions prior to V2.90, update to version V2.90 or later. For Modicon M340 versions prior to V3.10, update to version V3.10 or later. For Modicon Premium and Modicon Quantum, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-248

Related Identifiers

CVE-2019-6809

Affected Products

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

References · 3

• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6809 · Security Note