CVE-2019-6829
High
Description
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSchneider-electric Modicon M580 Firmware
PublishedSep 17, 2019
First seenSep 17, 2019
Weakness typeCWE-248CWE-248
How to fix
Update
- schneider-electric modicon_m580_firmware2.90 or later
- schneider-electric modicon_m340_firmware3.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric modicon_m580_firmware | v < 2.90 | 2.90 |
| schneider-electric modicon_m340_firmware | v < 3.10 | 3.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.