CVE-2019-6856

published 2020-01-06

CVE-2019-6856: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.

Affected

29 ranges · showing 25

Vendor	Product	Version range	Fixed in
schneider-electric	140cpu65150_firmware	< 3.52	3.52
schneider-electric	140cpu65160_firmware	< 3.52	3.52
schneider-electric	140cpu65160s_firmware	< 3.52	3.52
schneider-electric	140cpu65260_firmware	< 3.52	3.52
schneider-electric	140cpu65860_firmware	< 3.52	3.52
schneider-electric	140cpu67060_firmware	< 3.52	3.52
schneider-electric	140cpu67160_firmware	< 3.52	3.52
schneider-electric	140cpu67160s_firmware	< 3.52	3.52
schneider-electric	140cpu67260_firmware	< 3.52	3.52
schneider-electric	140cpu67261_firmware	< 3.52	3.52
schneider-electric	140cpu67861_firmware	< 3.52	3.52
schneider-electric	modicon_m340_firmware	< 3.01	3.01
schneider-electric	modicon_m580_firmware	< 2.80	2.80
schneider-electric	tsxh5724m_firmware	< 3.20	3.20
schneider-electric	tsxh5744m_firmware	< 3.20	3.20
schneider-electric	tsxp57104m_firmware	< 3.20	3.20
schneider-electric	tsxp57154m_firmware	< 3.20	3.20
schneider-electric	tsxp571634m_firmware	< 3.20	3.20
schneider-electric	tsxp57204m_firmware	< 3.20	3.20
schneider-electric	tsxp57254m_firmware	< 3.20	3.20
schneider-electric	tsxp572634m_firmware	< 3.20	3.20
schneider-electric	tsxp57304m_firmware	< 3.20	3.20
schneider-electric	tsxp57354m_firmware	< 3.20	3.20
schneider-electric	tsxp573634m_firmware	< 3.20	3.20
schneider-electric	tsxp57454m_firmware	< 3.20	3.20

CWE-754