CVE-2019-6815

🗓️ 22 May 2019 19:52:28Reported by schneiderType

Modicon Quantum firmware versions have CWE-264 vulnerability leading to denial of service or unauthorized PLC configuration modifications through Ethernet/IP protocol

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in access control mechanisms, allows a intruder to trigger a service failure or alter the controller’s configuration.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Modbus protocol implementation in microprogrammed software for programmable logic controllers like Modicon Quantum allows a intruder to trigger malfunctions in the equipment or unauthorized changes to its configuration.	25 Aug 202100:00	–	bdu_fstec
Circl	CVE-2019-6815	22 May 201920:48	–	circl
CNVD	Modicon Quantum Privilege and Access Control Vulnerabilities	22 May 201900:00	–	cnvd
Cvelist	CVE-2019-6815	22 May 201919:52	–	cvelist
EUVD	EUVD-2019-16369	7 Oct 202500:30	–	euvd
NVD	CVE-2019-6815	22 May 201920:29	–	nvd
Tenable Nessus	Schneider-electric Modicon Unspecified Vulnerability	8 Nov 201900:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Quantum Improper Access Control (CVE-2019-6815)	7 Feb 202200:00	–	nessus
Prion	Design/Logic Flaw	22 May 201920:29	–	prion

NVD

Node

schneider-electric modicon_quantum_firmware

AND

schneider-electric modicon_quantumMatch-

[
  {
    "product": "Modicon Quantum - all firmware versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon Quantum - all firmware versions"
      }
    ]
  }
]

Source	Link
schneider-electric	www.schneider-electric.com/en/download/document/SEVD-2019-134-09/

17 Jun 2026 02:39Current

9High risk

Vulners AI Score9

CVSS 26.4

CVSS 39.1

EPSS0.01399