CVE-2019-6845
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - cybersecurity@se.com
- Published
- 2019-10-29
- Last modified
- 2024-08-04
- Weaknesses
- CWE-319
Affected products
- Modicon M340 Firmware (Schneider-electric)
- Modicon M580 Firmware (Schneider-electric)
- Tsxmcpc002m Firmware (Schneider-electric)
- Tsxmcpc512k Firmware (Schneider-electric)
- Tsxmfp0128p2 Firmware (Schneider-electric)
- Tsxmfp064p2 Firmware (Schneider-electric)
- Tsxmfpp001m Firmware (Schneider-electric)
- Tsxmfpp002m Firmware (Schneider-electric)
- Tsxmfpp004m Firmware (Schneider-electric)
- Tsxmfpp224k Firmware (Schneider-electric)
- Tsxmfpp384k Firmware (Schneider-electric)
- Tsxmfpp512k Firmware (Schneider-electric)
- Tsxmrpc001m Firmware (Schneider-electric)
- Tsxmrpc002m Firmware (Schneider-electric)
- Tsxmrpc003m Firmware (Schneider-electric)
- Tsxmrpc007m Firmware (Schneider-electric)
- Tsxmrpc01m7 Firmware (Schneider-electric)
- Tsxmrpc448k Firmware (Schneider-electric)
- Tsxmrpc768k Firmware (Schneider-electric)
- Tsxmrpf004m Firmware (Schneider-electric)
- Tsxmrpf008m Firmware (Schneider-electric)
- Tsxmrpp224k Firmware (Schneider-electric)
- Tsxmrpp384k Firmware (Schneider-electric)
References
- https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-03
