What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2019-6845.

What is the severity level of CVE-2019-6845?

CVE-2019-6845 has a severity level of 7.5 (high).

What is the affected software for CVE-2019-6845?

The affected software for CVE-2019-6845 includes Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum (all firmware versions).

How can this vulnerability be exploited?

This vulnerability can be exploited by transferring applications to the controller using the Modbus TCP protocol.

How can I fix CVE-2019-6845?

To fix CVE-2019-6845, apply the necessary patch or firmware update provided by Schneider Electric.

Vulnerability/
CVE-2019-6845

high

7.5

CWE

319

29/10/2019

4/8/2024

CVE-2019-6845

First published: Tue Oct 29 2019(Updated: )

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol.

Credit: cybersecurity@se.com

Affected Software	Affected Version	How to fix
Schneider-electric Modicon M580 Firmware
Schneider-electric Modicon M580
Schneider-electric Modicon M340 Firmware
Schneider-electric Modicon M340
Schneider-electric Tsxmcpc002m Firmware
Schneider-electric Tsxmcpc002m
Schneider-electric Tsxmcpc512k Firmware
Schneider-electric Tsxmcpc512k
Schneider-electric Tsxmfpp001m Firmware
Schneider-electric Tsxmfpp001m
Schneider-electric Tsxmfpp002m Firmware
Schneider-electric Tsxmfpp002m
Schneider-electric Tsxmfpp004m Firmware
Schneider-electric Tsxmfpp004m
Schneider-electric Tsxmfpp512k Firmware
Schneider-electric Tsxmfpp512k
Schneider-electric Tsxmrpc001m Firmware
Schneider-electric Tsxmrpc001m
Schneider-electric Tsxmrpc002m Firmware
Schneider-electric Tsxmrpc002m
Schneider-electric Tsxmrpc003m Firmware
Schneider-electric Tsxmrpc003m
Schneider-electric Tsxmrpc007m Firmware
Schneider-electric Tsxmrpc007m
Schneider-electric Tsxmrpc01m7 Firmware
Schneider-electric Tsxmrpc01m7
Schneider-electric Tsxmrpc768k Firmware
Schneider-electric Tsxmrpc768k
Schneider-electric Tsxmrpf004m Firmware
Schneider-electric Tsxmrpf004m
Schneider-electric Tsxmrpf008m Firmware
Schneider-electric Tsxmrpf008m
Schneider-electric Tsxmfp0128p2 Firmware
Schneider-electric Tsxmfp0128p2
Schneider-electric Tsxmfp064p2 Firmware
Schneider-electric Tsxmfp064p2
Schneider-electric Tsxmfpp224k Firmware
Schneider-electric Tsxmfpp224k
Schneider-electric Tsxmfpp384k Firmware
Schneider-electric Tsxmfpp384k
Schneider-electric Tsxmrpc448k Firmware
Schneider-electric Tsxmrpc448k
Schneider-electric Tsxmrpp224k Firmware
Schneider-electric Tsxmrpp224k
Schneider-electric Tsxmrpp384k Firmware
Schneider-electric Tsxmrpp384k

Never miss a vulnerability like this again

Reference Links

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-03

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-6845.
What is the severity level of CVE-2019-6845?
CVE-2019-6845 has a severity level of 7.5 (high).
What is the affected software for CVE-2019-6845?
The affected software for CVE-2019-6845 includes Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum (all firmware versions).
How can this vulnerability be exploited?
This vulnerability can be exploited by transferring applications to the controller using the Modbus TCP protocol.
How can I fix CVE-2019-6845?
To fix CVE-2019-6845, apply the necessary patch or firmware update provided by Schneider Electric.