CVE-2019-6855

2020-01-0622:56:58

CWE-863

schneider

www.cve.org

EPSS

0.001

Percentile

39.5%

JSON

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.

CNA Affected

[
  {
    "product": " EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10)"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2019-344-02/

EPSS

0.001

Percentile

39.5%

JSON

Related for CVELIST:CVE-2019-6855