HIGH🇬🇧 English

CVE-2019-6820

CVSS 8.2v3.1pub. 2019-05-22upd. 2026-05-28

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

  • Schneider Electric Atv Imc Drive Controller

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Atv Imc Drive Controller Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon Lmc058

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon Lmc058 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon Lmc078

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon Lmc078 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M100

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M100 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M200

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M200 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M221

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M221 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M241

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M241 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M251

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M251 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M258

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Modicon M258 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Pacdrive Eco

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Pacdrive Eco Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Pacdrive Pro

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Pacdrive Pro2

    HW
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Pacdrive Pro2 Firmware

    OS
    Schneider-Electric
    wszystkie wersje

  • Schneider Electric Pacdrive Pro Firmware

    OS
    Schneider-Electric
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2020-7487CRITICAL9.8ten sam produkt

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker ...

CVE-2020-7489CRITICAL9.8ten sam produkt

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') v...

CVE-2018-7791CRITICAL9.8ten sam produkt

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 produc...

CVE-2018-7790CRITICAL9.8ten sam produkt

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all referen...

CVE-2017-6026CRITICAL9.1ten sam produkt

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, fi...

CVE-2019-6820 — HIGH 8.2 | CVEbaza.pl