CVE-2019-6820

🗓️ 22 May 2019 19:40:20Reported by schneiderType

Vulnerability in Modicon and PacDrive device

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers lies in the lack of authentication for a critical function, allowing an intruder to alter the device’s configuration.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed programmable logic controllers like Modicon and PacDrive lies in the lack of authentication for a critical function. This allows attackers to alter the device’s IP configuration.	30 Aug 202100:00	–	bdu_fstec
Circl	CVE-2019-6820	22 May 201920:48	–	circl
CNVD	Access Control Error Vulnerability in Multiple Schneider Electric Products	22 May 201900:00	–	cnvd
CVE	CVE-2019-6820	22 May 201919:40	–	cve
EUVD	EUVD-2019-16374	7 Oct 202500:30	–	euvd
NVD	CVE-2019-6820	22 May 201920:29	–	nvd
Tenable Nessus	Schneider-electric Modicon Missing Authentication for Critical Function	8 Nov 201900:00	–	nessus
Tenable Nessus	Schneider Electric Modicon Missing Authentication for Critical Function (CVE-2019-6820)	1 Mar 202300:00	–	nessus
Prion	Authentication flaw	22 May 201920:29	–	prion

[
  {
    "product": "Modicon and PacDrive Controller, All versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon and PacDrive Controller, All versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2"
      }
    ]
  }
]

Source	Link
schneider-electric	www.schneider-electric.com/en/download/document/SEVD-2019-134-02/

22 May 2019 19:40Current

8.2High risk

Vulners AI Score8.2

EPSS0.00302

CWE-306