What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2019-6851.

What is the severity rating of CVE-2019-6851?

CVE-2019-6851 has a severity rating of 7.5 (high).

What software is affected by CVE-2019-6851?

Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum (all firmware versions) are affected by CVE-2019-6851.

How does CVE-2019-6851 cause information disclosure?

CVE-2019-6851 causes information disclosure from the controller when using the TFTP protocol.

How can I fix CVE-2019-6851?

There is no known fix for CVE-2019-6851 at this time, consider applying security controls to mitigate the risk.

Vulnerability/
CVE-2019-6851

high

7.5

CWE

200 538

29/10/2019

3/2/2022

CVE-2019-6851: Infoleak

First published: Tue Oct 29 2019(Updated: )

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.

Credit: cybersecurity@se.com

Affected Software	Affected Version	How to fix
Schneider-electric Modicon M580 Firmware
Schneider-electric Modicon M580
Schneider-electric Modicon M340 Firmware
Schneider-electric Modicon M340
Schneider-electric Tsxmcpc002m Firmware
Schneider-electric Tsxmcpc002m
Schneider-electric Tsxmcpc512k Firmware
Schneider-electric Tsxmcpc512k
Schneider-electric Tsxmfpp001m Firmware
Schneider-electric Tsxmfpp001m
Schneider-electric Tsxmfpp002m Firmware
Schneider-electric Tsxmfpp002m
Schneider-electric Tsxmfpp004m Firmware
Schneider-electric Tsxmfpp004m
Schneider-electric Tsxmfpp512k Firmware
Schneider-electric Tsxmfpp512k
Schneider-electric Tsxmrpc001m Firmware
Schneider-electric Tsxmrpc001m
Schneider-electric Tsxmrpc002m Firmware
Schneider-electric Tsxmrpc002m
Schneider-electric Tsxmrpc003m Firmware
Schneider-electric Tsxmrpc003m
Schneider-electric Tsxmrpc007m Firmware
Schneider-electric Tsxmrpc007m
Schneider-electric Tsxmrpc01m7 Firmware
Schneider-electric Tsxmrpc01m7
Schneider-electric Tsxmrpc768k Firmware
Schneider-electric Tsxmrpc768k
Schneider-electric Tsxmrpf004m Firmware
Schneider-electric Tsxmrpf004m
Schneider-electric Tsxmrpf008m Firmware
Schneider-electric Tsxmrpf008m
Schneider-electric Tsxmfp0128p2 Firmware
Schneider-electric Tsxmfp0128p2
Schneider-electric Tsxmfp064p2 Firmware
Schneider-electric Tsxmfp064p2
Schneider-electric Tsxmfpp224k Firmware
Schneider-electric Tsxmfpp224k
Schneider-electric Tsxmfpp384k Firmware
Schneider-electric Tsxmfpp384k
Schneider-electric Tsxmrpc448k Firmware
Schneider-electric Tsxmrpc448k
Schneider-electric Tsxmrpp224k Firmware
Schneider-electric Tsxmrpp224k
Schneider-electric Tsxmrpp384k Firmware
Schneider-electric Tsxmrpp384k

Never miss a vulnerability like this again

Reference Links

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-01

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-6851.
What is the severity rating of CVE-2019-6851?
CVE-2019-6851 has a severity rating of 7.5 (high).
What software is affected by CVE-2019-6851?
Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum (all firmware versions) are affected by CVE-2019-6851.
How does CVE-2019-6851 cause information disclosure?
CVE-2019-6851 causes information disclosure from the controller when using the TFTP protocol.
How can I fix CVE-2019-6851?
There is no known fix for CVE-2019-6851 at this time, consider applying security controls to mitigate the risk.