CVE-2019-6829: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which…

high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	modicon_m340_firmware	< 3.10	3.10
schneider-electric	modicon_m580_firmware	< 2.90	2.90
schneider_electric_se	modicon_m340	—	—
schneider_electric_se	modicon_m580	—	—