CVE-2019-6808

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cybersecurity@se.com

Published

2019-05-22

Last modified

2024-08-04

Weaknesses

CWE-306

Affected products

• Modicon M340 Firmware (Schneider-electric)
• Modicon M580 Firmware (Schneider-electric)
• Modicon Premium Firmware (Schneider-electric)
• Modicon Quantum Firmware (Schneider-electric)

References

• https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0771