CVE-2019-6820 HIGH

Published: 2019-05-22 | Last Modified: 2026-06-17 | Status: Modified

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2

Additional Descriptions (1)

Una CWE-306: Una vulnerabilidad de Falta de Autenticación para Funciones Criticas, podría generar una modificación de la configuración IP del dispositivo (dirección IP, Máscara de Red y dirección IP de Gateway) cuando se recibe una trama Ethernet específica en todas las versiones de: Modicon M100, Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2.

CVSS Metrics

Base Score: 8.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	LOW
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 4.2

Base Score: 6.4 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:P/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 4.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-306
[email protected]	Primary	en CWE-306

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicon_m100_firmware	*	<built-in method update of dict object at 0x7e60a88ad3c0>	Operating System
schneider-electric	modicon_m200_firmware	*	<built-in method update of dict object at 0x7e60ba25f3c0>	Operating System
schneider-electric	modicon_m221_firmware	*	<built-in method update of dict object at 0x7e60a88ac980>	Operating System
schneider-electric	atv_imc_drive_controller_firmware	*	<built-in method update of dict object at 0x7e60a888f900>	Operating System
schneider-electric	modicon_m241_firmware	*	<built-in method update of dict object at 0x7e60ba25d400>	Operating System
schneider-electric	modicon_m251_firmware	*	<built-in method update of dict object at 0x7e60ba25c580>	Operating System
schneider-electric	modicon_m258_firmware	*	<built-in method update of dict object at 0x7e6110cf5f40>	Operating System
schneider-electric	modicon_lmc058_firmware	*	<built-in method update of dict object at 0x7e60a88aea00>	Operating System
schneider-electric	modicon_lmc078_firmware	*	<built-in method update of dict object at 0x7e6110cf5340>	Operating System
schneider-electric	pacdrive_eco_firmware	*	<built-in method update of dict object at 0x7e60ba25c140>	Operating System
schneider-electric	pacdrive_pro_firmware	*	<built-in method update of dict object at 0x7e60a888d480>	Operating System
schneider-electric	pacdrive_pro2_firmware	*	<built-in method update of dict object at 0x7e60a88afb00>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m100_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m100:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m200_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m200:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m221_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m221:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:atv_imc_drive_controller_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:atv_imc_drive_controller:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m241_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m241:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m251_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m251:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m258_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m258:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_lmc058_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_lmc058:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_lmc078_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_lmc078:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:pacdrive_eco_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:pacdrive_eco:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:pacdrive_pro_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:pacdrive_pro:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:pacdrive_pro2_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:pacdrive_pro2:-:::::::*`

References

https://www.schneider-electric.com/en/download/document/SEVD-2019-134-02/
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-02/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory