CVE-2019-6828
published 2019-09-17CVE-2019-6828: A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon…
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| schneider-electric | modicon_m340_firmware | < 3.10 | 3.10 |
| schneider-electric | modicon_m580_firmware | < 2.90 | 2.90 |
| schneider_electric_se | modicon_m340 | — | — |
| schneider_electric_se | modicon_m580 | — | — |
| schneider_electric_se | modicon_premium | — | — |
| schneider_electric_se | modicon_quantum | — | — |