CVE-2019-6845
First published: Tue Oct 29 2019(Updated: )
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Modicon M580 Firmware | ||
| Schneider Electric Modicon M580 | ||
| Schneider Electric Modicon M340 Firmware | ||
| Schneider Electric Modicon M340 | ||
| schneider-electric tsxmcpc002m | ||
| schneider-electric tsxmcpc002m firmware | ||
| schneider-electric tsxmcpc512k | ||
| Schneider Electric TSXMCPC512K Firmware | ||
| Schneider Electric TSX MFPP 001 M | ||
| schneider-electric tsxmfpp001m firmware | ||
| Schneider Electric TSXMFPP002M | ||
| Schneider Electric TSXMFPP002M | ||
| Schneider Electric TSXMFPP004M Firmware | ||
| Schneider Electric TSXMFPP004M Firmware | ||
| Schneider Electric TSXMFPP512K Firmware | ||
| tsxmfpp512k | ||
| schneider-electric tsxmrpc001m | ||
| schneider-electric tsxmrpc001m firmware | ||
| Schneider Electric TSXMRPC002M Firmware | ||
| Schneider Electric TSXMRPC002M Firmware | ||
| Schneider Electric TSXMRP Series | ||
| schneider-electric tsxmrpc003m firmware | ||
| Schneider Electric TSXMRPC007M Firmware | ||
| Schneider Electric TSXMRPC007M Firmware | ||
| schneider-electric tsxmrpc01m7 firmware | ||
| Schneider Electric TSX MR Series | ||
| Schneider Electric TSXMRPC768K Firmware | ||
| Schneider Electric TSXMRPC768K Firmware | ||
| schneider-electric tsxmrpf004m firmware | ||
| schneider-electric tsxmrpf004m | ||
| Schneider Electric TSXMRPF008M | ||
| schneider-electric tsxmrpf008m firmware | ||
| schneider-electric tsxmfp0128p2 | ||
| schneider-electric tsxmfp0128p2 firmware | ||
| Schneider Electric TSX MFP 064 P2 Firmware | ||
| Schneider Electric TSX MFP 064 P2 Firmware | ||
| Schneider Electric TSXMFPP224K | ||
| Schneider Electric TSXMFPP224K | ||
| Schneider Electric TSXMFPP384K Firmware | ||
| Schneider Electric TSXMFPP384K Firmware | ||
| schneider-electric tsxmrpc448k firmware | ||
| schneider-electric tsxmrpc448k | ||
| Schneider Electric TSXMRPP224K | ||
| schneider-electric tsxmrpp224k firmware | ||
| Schneider Electric TSXMRPP384K | ||
| Schneider Electric TSXMRPP384K |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-6845.
What is the severity level of CVE-2019-6845?
CVE-2019-6845 has a severity level of 7.5 (high).
What is the affected software for CVE-2019-6845?
The affected software for CVE-2019-6845 includes Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum (all firmware versions).
How can this vulnerability be exploited?
This vulnerability can be exploited by transferring applications to the controller using the Modbus TCP protocol.
How can I fix CVE-2019-6845?
To fix CVE-2019-6845, apply the necessary patch or firmware update provided by Schneider Electric.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider electric modicon m580 firmware
- canonical/schneider electric modicon m580
- canonical/schneider electric modicon m340 firmware
- canonical/schneider electric modicon m340
- canonical/schneider-electric tsxmcpc002m
- canonical/schneider-electric tsxmcpc002m firmware
- canonical/schneider-electric tsxmcpc512k
- canonical/schneider electric tsxmcpc512k firmware
- canonical/schneider electric tsx mfpp 001 m
- canonical/schneider-electric tsxmfpp001m firmware
- canonical/schneider electric tsxmfpp002m
- canonical/schneider electric tsxmfpp004m firmware
- canonical/schneider electric tsxmfpp512k firmware
- canonical/tsxmfpp512k
- canonical/schneider-electric tsxmrpc001m
- canonical/schneider-electric tsxmrpc001m firmware
- canonical/schneider electric tsxmrpc002m firmware
- canonical/schneider electric tsxmrp series
- canonical/schneider-electric tsxmrpc003m firmware
- canonical/schneider electric tsxmrpc007m firmware
- canonical/schneider-electric tsxmrpc01m7 firmware
- canonical/schneider electric tsx mr series
- canonical/schneider electric tsxmrpc768k firmware
- canonical/schneider-electric tsxmrpf004m firmware
- canonical/schneider-electric tsxmrpf004m
- canonical/schneider electric tsxmrpf008m
- canonical/schneider-electric tsxmrpf008m firmware
- canonical/schneider-electric tsxmfp0128p2
- canonical/schneider-electric tsxmfp0128p2 firmware
- canonical/schneider electric tsx mfp 064 p2 firmware
- canonical/schneider electric tsxmfpp224k
- canonical/schneider electric tsxmfpp384k firmware
- canonical/schneider-electric tsxmrpc448k firmware
- canonical/schneider-electric tsxmrpc448k
- canonical/schneider electric tsxmrpp224k
- canonical/schneider-electric tsxmrpp224k firmware
- canonical/schneider electric tsxmrpp384k