CVE-2019-6855
—CVSS 3.1
7.3 high
EPSS
<1%p59
Published
()
Modified
Description
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
- Vendors
- schneider-electric
- Products
- ecostruxure control expert, unity pro, modicon m580 bmep584040 firmware, modicon m580 bmeh584040 firmware, modicon m580 bmep586040 firmware, modicon m580 bmeh586040 firmware, modicon m580 bmep581020 firmware, modicon m580 bmep582020 firmware, modicon m580 bmep582040 firmware, modicon m580 bmep583020 firmware, modicon m580 bmep583040 firmware, modicon m580 bmep584020 firmware
- Weakness
- CWE-863
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.