Vulnerabilities > CVE-2019-6806 - Unspecified vulnerability in Schneider-Electric products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
schneider-electric
NVD
Published: 2019-05-22
Updated: 2022-02-03

Summary

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.

Vulnerable Configurations

Part Description Count
OS
Schneider-Electric
10
Hardware
Schneider-Electric
4

Talos

idTALOS-2019-0769
last seen2019-06-10
published2019-06-10
reporterTalos Intelligence
sourcehttp://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0769
titleSchneider Electric Modicon M580 UMAS read system blocks and bits information disclosure vulnerability

References