CVE-2019-6819: High severity Schneider-electric Modicon M340 Firmware vulnerability
Published May 22, 2019
·Updated
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium.
Affected Software
76 affected components
Schneider-electric Modicon M340 Firmware<3.01
Schneider-electric Bmxp341000
Schneider-electric Bmxp341000h
Schneider-electric Bmxp342000
Schneider-electric Bmxp3420102
Schneider-electric Bmxp3420102cl
Schneider-electric Bmxp342020
Schneider-electric Bmxp342020h
Schneider-electric Bmxp3420302
Schneider-electric Bmxp3420302cl
Schneider-electric Bmxp3420302h
Schneider-electric Modicon M580 Firmware<2.80
Schneider-electric Bmeh582040
Schneider-electric Bmeh582040c
Schneider-electric Bmeh584040
Schneider-electric Bmeh584040c
Schneider-electric Bmeh586040
Schneider-electric Bmeh586040c
Schneider-electric Modicon M580 Bmep581020
Schneider-electric Modicon M580 Bmep581020h
Schneider-electric Modicon M580 Bmep582020
Schneider-electric Modicon M580 Bmep582020h
Schneider-electric Modicon M580 Bmep582040
Schneider-electric Modicon M580 Bmep582040h
Schneider-electric Modicon M580 Bmep582040s
Schneider-electric Modicon M580 Bmep583020
Schneider-electric Modicon M580 Bmep583040
Schneider-electric Modicon M580 Bmep584020
Schneider-electric Modicon M580 Bmep584040
Schneider-electric Modicon M580 Bmep584040s
Schneider-electric Modicon M580 Bmep585040
Schneider-electric Modicon M580 Bmep585040c
Schneider-electric Modicon M580 Bmep586040
Schneider-electric Modicon M580 Bmep586040c
Schneider-electric Modicon Quantum Firmware
Schneider-electric Modicon Quantum
Schneider-electric Modicon Premium Firmware
Schneider-electric Modicon Premium
All of the following
Schneider-electric Modicon M340 Firmware<3.01
Any of the following
Schneider-electric Modicon M340 Bmxp341000
Schneider-electric Modicon M340 Bmxp341000h
Schneider-electric Modicon M340 Bmxp342000
Schneider-electric Modicon M340 Bmxp3420102
Schneider-electric Modicon M340 Bmxp3420102cl
Schneider-electric Modicon M340 Bmxp342020
Schneider-electric Modicon M340 Bmxp342020h
Schneider-electric Modicon M340 Bmxp3420302
Schneider-electric Modicon M340 Bmxp3420302cl
Schneider-electric Modicon M340 Bmxp3420302h
All of the following
Schneider-electric Modicon M580 Firmware<2.80
Any of the following
Schneider-electric Bmeh582040
Schneider-electric Bmeh582040c
Schneider-electric Bmeh584040
Schneider-electric Bmeh584040c
Schneider-electric Bmeh586040
Schneider-electric Bmeh586040c
Schneider-electric Modicon M580 Bmep581020
Schneider-electric Modicon M580 Bmep581020h
Schneider-electric Modicon M580 Bmep582020
Schneider-electric Modicon M580 Bmep582020h
Schneider-electric Modicon M580 Bmep582040
Schneider-electric Modicon M580 Bmep582040h
Schneider-electric Modicon M580 Bmep582040s
Schneider-electric Modicon M580 Bmep583020
Schneider-electric Modicon M580 Bmep583040
Schneider-electric Modicon M580 Bmep584020
Schneider-electric Modicon M580 Bmep584040
Schneider-electric Modicon M580 Bmep584040s
Schneider-electric Modicon M580 Bmep585040
Schneider-electric Modicon M580 Bmep585040c
Schneider-electric Modicon M580 Bmep586040
Schneider-electric Modicon M580 Bmep586040c
All of the following
Schneider-electric Modicon Quantum Firmware
Schneider-electric Modicon Quantum
All of the following
Schneider-electric Modicon Premium Firmware
Schneider-electric Modicon Premium
Event History
May 22, 2019
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
DescriptionWeakness
Data Sourced
via NVD·08:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2019-6819.
2
What is the severity rating of CVE-2019-6819?
CVE-2019-6819 has a severity rating of 7.5, which is considered high.
3
Which products are affected by CVE-2019-6819?
CVE-2019-6819 affects the following products: Modicon M340 firmware versions prior to V3.01, Modicon M580 firmware versions prior to V2.80.
4
How can CVE-2019-6819 be exploited?
CVE-2019-6819 can be exploited by sending specific Modbus frames to the affected controller.
5
Is there a fix available for CVE-2019-6819?
Yes, a fix is available for CVE-2019-6819. It is recommended to update the firmware to version V3.01 for Modicon M340 and V2.80 for Modicon M580.