CVE-2019-6851

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol...

Schneider Electric Modicon Exposure of Sensitive Information to an Unauthorized Actor (CVE-2019-6851)

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol. This plugin only works with Tenable.ot...

CVE-2019-6851

Schneider Electric Modicon M580 series PLCs are affected by CVE-2019-6851 (CWE-538) via the TFTP server, enabling unauthenticated disclosure of sensitive files. Affected devices include Modicon M580 and older Modicon controllers (M340, Premium, Quantum) across all firmware versions as described b...