NetSight
high7.5

CVE-2019-6806

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause …

Impact

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon Premium Firmware
All versions
Schneider-ElectricModicon Quantum Firmware
All versions
Schneider-ElectricModicon M340 Firmware
before 3.10
Schneider-ElectricModicon M580 Firmware
before 2.90

References