First published: Wed May 22 2019(Updated: )
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
schneider-electric Modicon M100 firmware | ||
Schneider Electric Modicon M100 | ||
Modicon M200 | ||
Modicon M200 | ||
Schneider Electric Modicon M221 Firmware | ||
Schneider Electric Modicon M221 Firmware | ||
Schneider Electric ATV IMC Drive Controller Firmware | ||
Schneider Electric ATV IMC Drive Controller Firmware | ||
Schneider Electric Modicon M241 | ||
Schneider Electric Modicon M241 | ||
schneider-electric Modicon M251 firmware | ||
schneider-electric Modicon M251 | ||
Schneider Electric Modicon M258 | ||
Schneider Electric Modicon M258 | ||
schneider-electric Modicon LMC058 firmware | ||
schneider-electric Modicon LMC058 firmware | ||
Schneider Electric Modicon LMC078 Firmware | ||
Schneider Electric Modicon LMC078 Firmware | ||
Schneider Electric PacDrive Eco | ||
schneider-electric PacDrive Eco firmware | ||
schneider-electric PacDrive Pro firmware | ||
PacDrive Pro | ||
Schneider Electric PacDrive Pro2 Firmware | ||
Schneider Electric PacDrive Pro2 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2019-6820.
CVE-2019-6820 has a severity rating of 8.2 (high).
The CWE ID for this vulnerability is CWE-306.
Modicon M100, Modicon M200, Modicon M221, and ATV IMC Drive Controller are affected by CVE-2019-6820.
Please refer to the following link for information on how to fix CVE-2019-6820: [CVE-2019-6820 Fix](https://www.schneider-electric.com/en/download/document/SEVD-2019-134-02/).