CVE-2019-6807

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus.

Score

CVSS 3.1 7.5 High

Status

Modified - cybersecurity@se.com

Published

2019-05-22

Last modified

2024-08-04

Weaknesses

CWE-755

Affected products

• Modicon M340 Firmware (Schneider-electric)
• Modicon M580 Firmware (Schneider-electric)
• Modicon Premium Firmware (Schneider-electric)
• Modicon Quantum Firmware (Schneider-electric)

References

• https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0770