high7.5
CVE-2019-6828
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Prem…
Impact
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Modicon M580 Firmware | before 2.90 |
| Schneider-Electric | Modicon M340 Firmware | before 3.10 |
| Schneider-Electric | Modicon Premium Firmware | All versions |
| Schneider-Electric | Modicon Quantum Firmware | All versions |