NetSight
IP …
high7.5

CVE-2019-6851

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions…

Impact

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
All versions
Schneider-ElectricModicon M340 Firmware
All versions
Schneider-ElectricTsxmcpc002m Firmware
All versions
Schneider-ElectricTsxmcpc512k Firmware
All versions
Schneider-ElectricTsxmfpp001m Firmware
All versions
Schneider-ElectricTsxmfpp002m Firmware
All versions
Schneider-ElectricTsxmfpp004m Firmware
All versions
Schneider-ElectricTsxmfpp512k Firmware
All versions
Schneider-ElectricTsxmrpc001m Firmware
All versions
Schneider-ElectricTsxmrpc002m Firmware
All versions
Schneider-ElectricTsxmrpc003m Firmware
All versions
Schneider-ElectricTsxmrpc007m Firmware
All versions

Weakness classification

CWE-538CWE-200

References