Lucene search

K
cvelistSchneiderCVELIST:CVE-2019-6852
HistoryNov 20, 2019 - 10:01 p.m.

CVE-2019-6852

2019-11-2022:01:49
CWE-200
schneider
www.cve.org
5

EPSS

0.002

Percentile

53.8%

A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

CNA Affected

[
  {
    "product": "Modicon Controllers (M340 CPUs, M340 communication modules,  Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions)",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon Controllers (M340 CPUs"
      },
      {
        "status": "affected",
        "version": "M340 communication modules"
      },
      {
        "status": "affected",
        "version": "Premium CPUs"
      },
      {
        "status": "affected",
        "version": "Premium communication modules"
      },
      {
        "status": "affected",
        "version": "Quantum CPUs"
      },
      {
        "status": "affected",
        "version": "Quantum communication modules - see security notification for specific versions)"
      }
    ]
  }
]

EPSS

0.002

Percentile

53.8%

Related for CVELIST:CVE-2019-6852