PT-2019-18367 · Schneider Electric · Modicon M340+1

Published 2019-09-17 · Updated 2026-05-29 · CVE-2019-6829

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.90 Modicon M340 versions prior to V3.10

Description A CWE-248: Uncaught Exception issue exists, which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.

Recommendations For Modicon M580 versions prior to V2.90, update to version V2.90 or later. For Modicon M340 versions prior to V3.10, update to version V3.10 or later.

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-248

CWE-755

Related Identifiers

CVE-2019-6829

Affected Products

Modicon M340

Modicon M580

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-6829 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6829 · Vendor Advisory
• https://t.me/cvenotify/26223 · Telegram Post
• https://t.me/cveNotify/165214 · Telegram Post