ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-6820

—
CVSS 3.1
8.2 high
EPSS
1%p68
Published
()
Modified
Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2

Vendors
schneider-electric
Products
modicon m100 firmware, modicon m200 firmware, modicon m221 firmware, atv imc drive controller firmware, modicon m241 firmware, modicon m251 firmware, modicon m258 firmware, modicon lmc058 firmware, modicon lmc078 firmware, pacdrive eco firmware, pacdrive pro firmware, pacdrive pro2 firmware
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.