CVE-2019-6819
First published: Wed May 22 2019(Updated: )
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Schneider Electric Modicon M340 Firmware | <3.01 | |
| Any of | ||
| Schneider Electric Modicon M340 BMXP341000 | ||
| Schneider Electric Modicon M340 BMXP341000H | ||
| Schneider Electric Modicon M340 BMXP342000 Firmware | ||
| Schneider Electric Modicon M340 BMXP3420102 | ||
| Schneider Electric Modicon M340 BMXP3420102CL Firmware | ||
| Schneider Electric Modicon M340 BMXP342020 | ||
| Schneider Electric Modicon M340 BMXP342020H | ||
| Schneider Electric Modicon M340 BMXP3420302 Firmware | ||
| Schneider Electric Modicon M340 BMXP3420302CL | ||
| Schneider Electric Modicon M340 BMXP3420302H Firmware | ||
| All of | ||
| Schneider Electric Modicon M580 Firmware | <2.80 | |
| Any of | ||
| Schneider Electric BMEH582040 Firmware | ||
| Schneider Electric BMEH582040C | ||
| Schneider Electric BMEH584040 | ||
| Schneider Electric BMEH584040C | ||
| Schneider Electric BMEH586040 | ||
| schneider-electric bmeh586040c | ||
| Schneider Electric Modicon M580 BMEP581020 | ||
| schneider-electric Modicon M580 BMEP581020H firmware | ||
| Modicon M580 | ||
| Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP582040S | ||
| Schneider Electric Modicon M580 BMEP583020 | ||
| Schneider Electric Modicon M580 BMEP583040 | ||
| Schneider Electric Modicon M580 BMEP584020 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040S Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric modicon m580 bmep586040 firmware | ||
| schneider-electric Modicon M580 bmep586040c firmware | ||
| All of | ||
| Schneider Electric Modicon Quantum Firmware | ||
| Schneider Electric Modicon Quantum | ||
| All of | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon M340 Firmware | <3.01 | |
| Schneider Electric BMXP341000 Firmware | ||
| Schneider Electric BMXP341000H Firmware | ||
| Schneider Electric BMXP342000 Firmware | ||
| Schneider Electric BMXP3420102 Firmware | ||
| Schneider Electric BMXP3420102CL | ||
| schneider-electric BMXP342020H firmware | ||
| schneider-electric BMXP342020H firmware | ||
| Schneider Electric BMXP3420302H firmware | ||
| Schneider Electric BMXP3420302CL Firmware | ||
| Schneider Electric BMXP3420302H firmware | ||
| Schneider Electric Modicon M580 Firmware | <2.80 | |
| Schneider Electric BMEH582040 Firmware | ||
| Schneider Electric BMEH582040C | ||
| Schneider Electric BMEH584040 | ||
| Schneider Electric BMEH584040C | ||
| Schneider Electric BMEH586040 | ||
| schneider-electric bmeh586040c | ||
| Schneider Electric Modicon M580 BMEP581020 | ||
| schneider-electric Modicon M580 BMEP581020H firmware | ||
| Modicon M580 | ||
| Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| schneider-electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP582040S | ||
| Schneider Electric Modicon M580 BMEP583020 | ||
| Schneider Electric Modicon M580 BMEP583040 | ||
| Schneider Electric Modicon M580 BMEP584020 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040 Firmware | ||
| Schneider Electric Modicon M580 BMEP584040S Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| schneider-electric modicon m580 bmep586040 firmware | ||
| schneider-electric Modicon M580 bmep586040c firmware | ||
| Schneider Electric Modicon Quantum Firmware | ||
| Schneider Electric Modicon Quantum | ||
| Schneider Electric Modicon Premium | ||
| Schneider Electric Modicon Premium |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2019-6819.
What is the severity rating of CVE-2019-6819?
CVE-2019-6819 has a severity rating of 7.5, which is considered high.
Which products are affected by CVE-2019-6819?
CVE-2019-6819 affects the following products: Modicon M340 firmware versions prior to V3.01, Modicon M580 firmware versions prior to V2.80.
How can CVE-2019-6819 be exploited?
CVE-2019-6819 can be exploited by sending specific Modbus frames to the affected controller.
Is there a fix available for CVE-2019-6819?
Yes, a fix is available for CVE-2019-6819. It is recommended to update the firmware to version V3.01 for Modicon M340 and V2.80 for Modicon M580.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- agent/softwarecombine
- agent/tags
- vendor/schneider-electric
- canonical/schneider electric modicon m340 firmware
- canonical/schneider electric modicon m340 bmxp341000
- canonical/schneider electric modicon m340 bmxp341000h
- canonical/schneider electric modicon m340 bmxp342000 firmware
- canonical/schneider electric modicon m340 bmxp3420102
- canonical/schneider electric modicon m340 bmxp3420102cl firmware
- canonical/schneider electric modicon m340 bmxp342020
- canonical/schneider electric modicon m340 bmxp342020h
- canonical/schneider electric modicon m340 bmxp3420302 firmware
- canonical/schneider electric modicon m340 bmxp3420302cl
- canonical/schneider electric modicon m340 bmxp3420302h firmware
- canonical/schneider electric modicon m580 firmware
- canonical/schneider electric bmeh582040 firmware
- canonical/schneider electric bmeh582040c
- canonical/schneider electric bmeh584040
- canonical/schneider electric bmeh584040c
- canonical/schneider electric bmeh586040
- canonical/schneider-electric bmeh586040c
- canonical/schneider electric modicon m580 bmep581020
- canonical/schneider-electric modicon m580 bmep581020h firmware
- canonical/modicon m580
- canonical/schneider-electric modicon m580
- canonical/schneider electric modicon m580 bmep582040s
- canonical/schneider electric modicon m580 bmep583020
- canonical/schneider electric modicon m580 bmep583040
- canonical/schneider electric modicon m580 bmep584020 firmware
- canonical/schneider electric modicon m580 bmep584040 firmware
- canonical/schneider electric modicon m580 bmep584040s firmware
- canonical/schneider-electric modicon m580 bmep585040c firmware
- canonical/schneider-electric modicon m580 bmep586040 firmware
- canonical/schneider-electric modicon m580 bmep586040c firmware
- canonical/schneider electric modicon quantum firmware
- canonical/schneider electric modicon quantum
- canonical/schneider electric modicon premium
- canonical/schneider electric bmxp341000 firmware
- canonical/schneider electric bmxp341000h firmware
- canonical/schneider electric bmxp342000 firmware
- canonical/schneider electric bmxp3420102 firmware
- canonical/schneider electric bmxp3420102cl
- canonical/schneider-electric bmxp342020h firmware
- canonical/schneider electric bmxp3420302h firmware
- canonical/schneider electric bmxp3420302cl firmware