PT-2019-18368 · Schneider Electric · Modicon M580

Published 2019-09-17 · Updated 2022-10-14 · CVE-2019-6830

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V2.80

Description A vulnerability exists that could cause a possible denial of service when sending an appropriately timed HTTP request to the controller. This issue is related to an uncaught exception.

Recommendations For versions prior to V2.80, update to version V2.80 or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-248

Related Identifiers

CVE-2019-6830

Affected Products

Modicon M580

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6830 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2019-134-11 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6830 · Vendor Advisory