ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-6821

—
CVSS 3.1
6.5 medium
EPSS
2%p79
Published
()
Modified
Description

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum.

Vendors
schneider-electric
Products
modicon m580 firmware, modicon m340 firmware, modicon quantum firmware, modicon premium firmware
Weakness
CWE-330
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news

No ingested article mentions this CVE yet.