NetSight
IP …
critical9.8

CVE-2019-6808

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cau…

Impact

A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a remote code execution by overwriting configuration settings of the controller over Modbus.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon Premium Firmware
through 3.20
Schneider-ElectricModicon Quantum Firmware
through 3.60
Schneider-ElectricModicon M340 Firmware
before 3.10
Schneider-ElectricModicon M580 Firmware
before 2.90

Weakness classification

CWE-306

References