CVE-2019-6851: Infoleak
First published: Tue Oct 29 2019(Updated: )
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Modicon M580 Firmware | ||
| Schneider Electric Modicon M580 | ||
| Schneider Electric Modicon M340 Firmware | ||
| Schneider Electric Modicon M340 | ||
| schneider-electric tsxmcpc002m | ||
| schneider-electric tsxmcpc002m firmware | ||
| schneider-electric tsxmcpc512k | ||
| Schneider Electric TSXMCPC512K Firmware | ||
| Schneider Electric TSX MFPP 001 M | ||
| schneider-electric tsxmfpp001m firmware | ||
| Schneider Electric TSXMFPP002M | ||
| Schneider Electric TSXMFPP002M | ||
| Schneider Electric TSXMFPP004M Firmware | ||
| Schneider Electric TSXMFPP004M Firmware | ||
| Schneider Electric TSXMFPP512K Firmware | ||
| tsxmfpp512k | ||
| schneider-electric tsxmrpc001m | ||
| schneider-electric tsxmrpc001m firmware | ||
| Schneider Electric TSXMRPC002M Firmware | ||
| Schneider Electric TSXMRPC002M Firmware | ||
| Schneider Electric TSXMRP Series | ||
| schneider-electric tsxmrpc003m firmware | ||
| Schneider Electric TSXMRPC007M Firmware | ||
| Schneider Electric TSXMRPC007M Firmware | ||
| schneider-electric tsxmrpc01m7 firmware | ||
| Schneider Electric TSX MR Series | ||
| Schneider Electric TSXMRPC768K Firmware | ||
| Schneider Electric TSXMRPC768K Firmware | ||
| schneider-electric tsxmrpf004m firmware | ||
| schneider-electric tsxmrpf004m | ||
| Schneider Electric TSXMRPF008M | ||
| schneider-electric tsxmrpf008m firmware | ||
| schneider-electric tsxmfp0128p2 | ||
| schneider-electric tsxmfp0128p2 firmware | ||
| Schneider Electric TSX MFP 064 P2 Firmware | ||
| Schneider Electric TSX MFP 064 P2 Firmware | ||
| Schneider Electric TSXMFPP224K | ||
| Schneider Electric TSXMFPP224K | ||
| Schneider Electric TSXMFPP384K Firmware | ||
| Schneider Electric TSXMFPP384K Firmware | ||
| schneider-electric tsxmrpc448k firmware | ||
| schneider-electric tsxmrpc448k | ||
| Schneider Electric TSXMRPP224K | ||
| schneider-electric tsxmrpp224k firmware | ||
| Schneider Electric TSXMRPP384K | ||
| Schneider Electric TSXMRPP384K |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-6851.
What is the severity rating of CVE-2019-6851?
CVE-2019-6851 has a severity rating of 7.5 (high).
What software is affected by CVE-2019-6851?
Modicon M580, Modicon M340, Modicon Premium, and Modicon Quantum (all firmware versions) are affected by CVE-2019-6851.
How does CVE-2019-6851 cause information disclosure?
CVE-2019-6851 causes information disclosure from the controller when using the TFTP protocol.
How can I fix CVE-2019-6851?
There is no known fix for CVE-2019-6851 at this time, consider applying security controls to mitigate the risk.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider electric modicon m580 firmware
- canonical/schneider electric modicon m580
- canonical/schneider electric modicon m340 firmware
- canonical/schneider electric modicon m340
- canonical/schneider-electric tsxmcpc002m
- canonical/schneider-electric tsxmcpc002m firmware
- canonical/schneider-electric tsxmcpc512k
- canonical/schneider electric tsxmcpc512k firmware
- canonical/schneider electric tsx mfpp 001 m
- canonical/schneider-electric tsxmfpp001m firmware
- canonical/schneider electric tsxmfpp002m
- canonical/schneider electric tsxmfpp004m firmware
- canonical/schneider electric tsxmfpp512k firmware
- canonical/tsxmfpp512k
- canonical/schneider-electric tsxmrpc001m
- canonical/schneider-electric tsxmrpc001m firmware
- canonical/schneider electric tsxmrpc002m firmware
- canonical/schneider electric tsxmrp series
- canonical/schneider-electric tsxmrpc003m firmware
- canonical/schneider electric tsxmrpc007m firmware
- canonical/schneider-electric tsxmrpc01m7 firmware
- canonical/schneider electric tsx mr series
- canonical/schneider electric tsxmrpc768k firmware
- canonical/schneider-electric tsxmrpf004m firmware
- canonical/schneider-electric tsxmrpf004m
- canonical/schneider electric tsxmrpf008m
- canonical/schneider-electric tsxmrpf008m firmware
- canonical/schneider-electric tsxmfp0128p2
- canonical/schneider-electric tsxmfp0128p2 firmware
- canonical/schneider electric tsx mfp 064 p2 firmware
- canonical/schneider electric tsxmfpp224k
- canonical/schneider electric tsxmfpp384k firmware
- canonical/schneider-electric tsxmrpc448k firmware
- canonical/schneider-electric tsxmrpc448k
- canonical/schneider electric tsxmrpp224k
- canonical/schneider-electric tsxmrpp224k firmware
- canonical/schneider electric tsxmrpp384k