high8.2
CVE-2019-6820
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network m…
Impact
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Modicon M100 Firmware | All versions |
| Schneider-Electric | Modicon M200 Firmware | All versions |
| Schneider-Electric | Modicon M221 Firmware | All versions |
| Schneider-Electric | Atv Imc Drive Controller Firmware | All versions |
| Schneider-Electric | Modicon M241 Firmware | All versions |
| Schneider-Electric | Modicon M251 Firmware | All versions |
| Schneider-Electric | Modicon M258 Firmware | All versions |
| Schneider-Electric | Modicon Lmc058 Firmware | All versions |
| Schneider-Electric | Modicon Lmc078 Firmware | All versions |
| Schneider-Electric | Pacdrive Eco Firmware | All versions |
| Schneider-Electric | Pacdrive Pro Firmware | All versions |
| Schneider-Electric | Pacdrive Pro2 Firmware | All versions |