CVE-2019-6855
First published: Mon Jan 06 2020(Updated: )
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| EcoStruxure Control Expert | <14.1 | |
| EcoStruxure Control Expert | =14.1 | |
| Unity Pro | ||
| Schneider Electric Modicon M580 BMEP584040 Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEP584040 Firmware | ||
| Schneider Electric Modicon M580 BMEH584040 Firmware | <3.10 | |
| schneider-electric Modicon M580 bmeh584040c | ||
| schneider-electric Modicon M580 bmep586040c firmware | <3.10 | |
| schneider-electric modicon m580 bmep586040 firmware | ||
| Schneider Electric Modicon M580 | <3.10 | |
| Schneider Electric Modicon M580 | ||
| Modicon M580 | <3.10 | |
| Schneider Electric Modicon M580 BMEP581020 | ||
| Schneider Electric Modicon M580 BMEP582020 Firmware | <3.10 | |
| Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP582040 Firmware | <3.10 | |
| schneider-electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP583020 Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEP583020 | ||
| Schneider Electric Modicon M580 BMEP583040 Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEP583040 | ||
| Schneider Electric Modicon M580 BMEP584020 Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEP584020 Firmware | ||
| schneider-electric Modicon M580 BMEP585040C Firmware | <3.10 | |
| schneider-electric Modicon M580 BMEP585040C Firmware | ||
| Schneider Electric Modicon M580 BMEH582040 Firmware | <3.10 | |
| schneider-electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP584040S Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEP584040S Firmware | ||
| Schneider Electric Modicon M580 BMEH584040S Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEH584040S Firmware | ||
| Schneider Electric Modicon M580 Firmware | <3.10 | |
| Schneider Electric Modicon M580 | ||
| Schneider Electric Modicon M580 BMEP582040 Firmware | <3.10 | |
| Schneider Electric Modicon M580 BMEP582040S | ||
| Schneider Electric Modicon M340 BMXP3420302 Firmware | <3.20 | |
| Schneider Electric Modicon M340 BMXP3420302 Firmware | ||
| Schneider Electric Modicon M340 BMXP342020 Firmware | <3.20 | |
| Schneider Electric Modicon M340 BMXP342020 | ||
| Schneider Electric Modicon M340 BMXP342000 Firmware | <3.20 | |
| Schneider Electric Modicon M340 BMXP342000 Firmware | ||
| Schneider Electric Modicon M340 BMXP341000 Firmware | <3.20 | |
| Schneider Electric Modicon M340 BMXP341000 | ||
| Schneider Electric Modicon M340 BMXP3420102 Firmware | <3.20 | |
| Schneider Electric Modicon M340 BMXP3420102 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-6855?
CVE-2019-6855 is an Incorrect Authorization vulnerability that exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), and Modicon M580 (all versions prior to V3.10).
How severe is CVE-2019-6855?
CVE-2019-6855 has a severity rating of 7.3 (High).
What software is affected by CVE-2019-6855?
The software affected by CVE-2019-6855 includes EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), and Modicon M580 (all versions prior to V3.10).
How can I fix CVE-2019-6855?
To fix CVE-2019-6855, it is recommended to update the affected software to the latest version.
Where can I find more information about CVE-2019-6855?
You can find more information about CVE-2019-6855 at the following link: [CVE-2019-6855](https://www.se.com/ww/en/download/document/SEVD-2019-344-02/).
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/ecostruxure control expert
- version/ecostruxure control expert/14.1
- canonical/unity pro
- canonical/schneider electric modicon m580 bmep584040 firmware
- canonical/schneider electric modicon m580 bmeh584040 firmware
- canonical/schneider-electric modicon m580 bmeh584040c
- canonical/schneider-electric modicon m580 bmep586040c firmware
- canonical/schneider-electric modicon m580 bmep586040 firmware
- canonical/schneider electric modicon m580
- canonical/modicon m580
- canonical/schneider electric modicon m580 bmep581020
- canonical/schneider electric modicon m580 bmep582020 firmware
- canonical/schneider electric modicon m580 bmep582040 firmware
- canonical/schneider-electric modicon m580
- canonical/schneider electric modicon m580 bmep583020 firmware
- canonical/schneider electric modicon m580 bmep583020
- canonical/schneider electric modicon m580 bmep583040 firmware
- canonical/schneider electric modicon m580 bmep583040
- canonical/schneider electric modicon m580 bmep584020 firmware
- canonical/schneider-electric modicon m580 bmep585040c firmware
- canonical/schneider electric modicon m580 bmeh582040 firmware
- canonical/schneider electric modicon m580 bmep584040s firmware
- canonical/schneider electric modicon m580 bmeh584040s firmware
- canonical/schneider electric modicon m580 firmware
- canonical/schneider electric modicon m580 bmep582040s
- canonical/schneider electric modicon m340 bmxp3420302 firmware
- canonical/schneider electric modicon m340 bmxp342020 firmware
- canonical/schneider electric modicon m340 bmxp342020
- canonical/schneider electric modicon m340 bmxp342000 firmware
- canonical/schneider electric modicon m340 bmxp341000 firmware
- canonical/schneider electric modicon m340 bmxp341000
- canonical/schneider electric modicon m340 bmxp3420102 firmware
- canonical/schneider electric modicon m340 bmxp3420102