CVE-2019-6855

🗓️ 06 Jan 2020 22:56:58Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 164 Views

Incorrect Authorization vulnerability in EcoStruxure Control Expert, Unity Pro, Modicon M340, and Modicon M580 allows authentication bypass

Reporter	Title	Published	Views	Family All 9
CNVD	Schneider Electric EcoStruxure Control Expert and Unity Pro License Issue Vulnerability	7 Jan 202000:00	–	cnvd
Cvelist	CVE-2019-6855	6 Jan 202022:56	–	cvelist
EUVD	EUVD-2019-16409	7 Oct 202500:30	–	euvd
NVD	CVE-2019-6855	6 Jan 202023:15	–	nvd
OSV	CVE-2019-6855	6 Jan 202023:15	–	osv
Tenable Nessus	Schneider-electric Ecostruxure Incorrect Authorization	27 May 202000:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Incorrect Authorization (CVE-2019-6855)	7 Feb 202200:00	–	nessus
Prion	Authorization	6 Jan 202023:15	–	prion
RedhatCVE	CVE-2019-6855	22 May 202510:17	–	redhatcve

NVD

Node

schneider-electric ecostruxure_control_expertRange<14.1

schneider-electric ecostruxure_control_expertMatch14.1-

schneider-electric unity_pro

Node

schneider-electric modicon_m580_bmep584040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep584040Match-

Node

schneider-electric modicon_m580_bmeh584040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmeh584040Match-

Node

schneider-electric modicon_m580_bmep586040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep586040Match-

Node

schneider-electric modicon_m580_bmeh586040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmeh586040Match-

Node

schneider-electric modicon_m580_bmep581020_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep581020Match-

Node

schneider-electric modicon_m580_bmep582020_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep582020Match-

Node

schneider-electric modicon_m580_bmep582040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep582040Match-

Node

schneider-electric modicon_m580_bmep583020_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep583020Match-

Node

schneider-electric modicon_m580_bmep583040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep583040Match-

Node

schneider-electric modicon_m580_bmep584020_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep584020Match-

Node

schneider-electric modicon_m580_bmep585040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep585040Match-

Node

schneider-electric modicon_m580_bmeh582040_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmeh582040Match-

Node

schneider-electric modicon_m580_bmep584040s_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep584040sMatch-

Node

schneider-electric modicon_m580_bmeh584040s_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmeh584040sMatch-

Node

schneider-electric modicon_m580_bmeh586040s_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmeh586040sMatch-

Node

schneider-electric modicon_m580_bmep582040s_firmwareRange<3.10

AND

schneider-electric modicon_m580_bmep582040sMatch-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.20

AND

schneider-electric modicon_m340_bmxp3420302Match-

Node

schneider-electric modicon_m340_bmxp342020_firmwareRange<3.20

AND

schneider-electric modicon_m340_bmxp342020Match-

Node

schneider-electric modicon_m340_bmxp342000_firmwareRange<3.20

AND

schneider-electric modicon_m340_bmxp342000Match-

Node

schneider-electric modicon_m340_bmxp341000_firmwareRange<3.20

AND

schneider-electric modicon_m340_bmxp341000Match-

Node

schneider-electric modicon_m340_bmxp3420102_firmwareRange<3.20

AND

schneider-electric modicon_m340_bmxp3420102Match-

Node

schneider-electric modicon_m340_bmxp3420302_firmwareRange<3.20

AND

schneider-electric modicon_m340_bmxp3420302Match-

[
  {
    "product": "EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10)"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2019-344-02/

21 Nov 2024 04:47Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.3

CVSS 27.5

EPSS0.00191

CWE-863