Schneider Electric Modicon M580 Controller denial of service

A vulnerability, which was classified as problematic, was found in Schneider Electric Modicon M580, Modicon M340, Modicon Premium and Modicon Quantum (the affected version unknown). This affects an unknown functionality of the component Controller Handler. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. This is going to have an impact on availability.

The weakness was presented 09/17/2019. The advisory is shared at schneider-electric.com. This vulnerability is uniquely identified as CVE-2019-6809 since 01/25/2019. Neither technical details nor an exploit are publicly available.

Upgrading eliminates this vulnerability.

See 141938, 141939 and 141940 for similar entries.

Vendor

• Schneider Electric

Name

• Modicon M340
• Modicon M580
• Modicon Premium
• Modicon Quantum

• 🔒
• 🔒
• 🔒

• 🔒
• 🔒
• 🔒

VulDB Meta Base Score: 3.5
VulDB Meta Temp Score: 3.4

VulDB Base Score: ≈3.5
VulDB Temp Score: ≈3.4
VulDB Vector: 🔒
VulDB Reliability: 🔍

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Denial of service (CWE-404)
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

01/25/2019 CVE assigned
09/17/2019 +235 days Advisory disclosed
09/18/2019 +1 days VulDB entry created
09/18/2019 +0 days VulDB last updateVendor: schneider-electric.com

Advisory: schneider-electric.com

CVE: CVE-2019-6809 (🔒)
See also: 🔒

Created: 09/18/2019 11:21 AM
Complete: 🔍

Comments

Comments are closed.