PT-2019-2284 · Schneider Electric · Modicon M580+3

Published 2019-05-14 · Updated 2024-04-10 · CVE-2019-6819

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Modicon M340 versions prior to V3.01 Modicon M580 versions prior to V2.80 Modicon Quantum (all firmware versions) Modicon Premium (all firmware versions)

Description A vulnerability exists due to improper check for unusual or exceptional conditions, which could cause a possible Denial of Service when specific Modbus frames are sent to the controller. This issue is related to insufficient checking of exceptional states, allowing a remote attacker to cause a denial of service by sending specially crafted Modbus packets to the controller.

Recommendations For Modicon M340 versions prior to V3.01, update to firmware version V3.01 or later. For Modicon M580 versions prior to V2.80, update to firmware version V2.80 or later. For Modicon Quantum and Modicon Premium, since all firmware versions are affected, consider restricting access to the controller or implementing additional security measures to minimize the risk of exploitation until a fix is available. As a temporary workaround, consider disabling the reception of Modbus frames from untrusted sources until a patch is available.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2019-02055

CVE-2019-6819

Affected Products

Modicon M340

Modicon M580

Modicon Premium

Modicon Quantum

References · 6

• https://osv.dev/vulnerability/CVE-2019-6819 · Vendor Advisory
• https://schneider-electric.com/en/download/document/SEVD-2019-134-05 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6819 · Security Note
• https://bdu.fstec.ru/vul/2019-02055 · Security Note
• http://securityfocus.com/bid/109004 · Note
• https://t.me/cvenotify/19690 · Telegram Post