NetSight
IP …
high7.5

CVE-2019-6845

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware …

Impact

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
All versions
Schneider-ElectricModicon M340 Firmware
All versions
Schneider-ElectricTsxmcpc002m Firmware
All versions
Schneider-ElectricTsxmcpc512k Firmware
All versions
Schneider-ElectricTsxmfpp001m Firmware
All versions
Schneider-ElectricTsxmfpp002m Firmware
All versions
Schneider-ElectricTsxmfpp004m Firmware
All versions
Schneider-ElectricTsxmfpp512k Firmware
All versions
Schneider-ElectricTsxmrpc001m Firmware
All versions
Schneider-ElectricTsxmrpc002m Firmware
All versions
Schneider-ElectricTsxmrpc003m Firmware
All versions
Schneider-ElectricTsxmrpc007m Firmware
All versions

Weakness classification

CWE-319

References