high7.3
CVE-2019-6855
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all ve…
Impact
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Control Expert | before 14.1 Version 14.1 |
| Schneider-Electric | Unity Pro | All versions |
| Schneider-Electric | Modicon M580 Bmep584040 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmeh584040 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep586040 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmeh586040 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep581020 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep582020 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep582040 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep583020 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep583040 Firmware | before 3.10 |
| Schneider-Electric | Modicon M580 Bmep584020 Firmware | before 3.10 |