CVE-2019-6819

HIGH

Modicon M340 < 3.01, M580 < 2.80, Quantum, and Premium - Denial of Service via Modbus Frame Handling

Title source: llm
STIX 2.1

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to V2.80, All firmware versions of Modicon Quantum and Modicon Premium.

References (2)

Core 2
Core References
Broken Link vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/109004

Scores

CVSS v3 7.5
EPSS 0.0047
EPSS Percentile 64.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-754
Status published
Products (4)
schneider-electric/modicon_m340_firmware < 3.01
schneider-electric/modicon_m580_firmware < 2.80
schneider-electric/modicon_premium_firmware
schneider-electric/modicon_quantum_firmware
Published May 22, 2019
Tracked Since Feb 18, 2026