CVE-2019-6851 HIGH

Published: 2019-10-29 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.

Additional Descriptions (1)

CWE-538: Hay una vulnerabilidad de Exposición de Información de Archivos y Directorios en Modicon M580, Modicon M340, Modicon Premium, Modicon Quantum (todas las versiones de firmware), lo que podría causar una divulgación de información del controlador cuando se usa el protocolo TFTP.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	NONE
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-538
[email protected]	Primary	en CWE-200

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicon_m580_firmware	*	<built-in method update of dict object at 0x7e60a8b7f500>	Operating System
schneider-electric	modicon_m340_firmware	*	<built-in method update of dict object at 0x7e60a8b7d980>	Operating System
schneider-electric	tsxmcpc002m_firmware	*	<built-in method update of dict object at 0x7e60bbd61200>	Operating System
schneider-electric	tsxmcpc512k_firmware	*	<built-in method update of dict object at 0x7e613c198dc0>	Operating System
schneider-electric	tsxmfpp001m_firmware	*	<built-in method update of dict object at 0x7e60a8b7d180>	Operating System
schneider-electric	tsxmfpp002m_firmware	*	<built-in method update of dict object at 0x7e60a8b7fa80>	Operating System
schneider-electric	tsxmfpp004m_firmware	*	<built-in method update of dict object at 0x7e60a8b7e200>	Operating System
schneider-electric	tsxmfpp512k_firmware	*	<built-in method update of dict object at 0x7e60a8b7cd80>	Operating System
schneider-electric	tsxmrpc001m_firmware	*	<built-in method update of dict object at 0x7e60a8b7d880>	Operating System
schneider-electric	tsxmrpc002m_firmware	*	<built-in method update of dict object at 0x7e60a8b7d200>	Operating System
schneider-electric	tsxmrpc003m_firmware	*	<built-in method update of dict object at 0x7e611232c700>	Operating System
schneider-electric	tsxmrpc007m_firmware	*	<built-in method update of dict object at 0x7e60bb329080>	Operating System
schneider-electric	tsxmrpc01m7_firmware	*	<built-in method update of dict object at 0x7e60a8b7f8c0>	Operating System
schneider-electric	tsxmrpc768k_firmware	*	<built-in method update of dict object at 0x7e60bbd60d00>	Operating System
schneider-electric	tsxmrpf004m_firmware	*	<built-in method update of dict object at 0x7e60a8b7ca80>	Operating System
schneider-electric	tsxmrpf008m_firmware	*	<built-in method update of dict object at 0x7e60a8b7e540>	Operating System
schneider-electric	tsxmcpc002m_firmware	*	<built-in method update of dict object at 0x7e60bbd62d80>	Operating System
schneider-electric	tsxmcpc512k_firmware	*	<built-in method update of dict object at 0x7e60a8b7fe80>	Operating System
schneider-electric	tsxmfp0128p2_firmware	*	<built-in method update of dict object at 0x7e60e8876e80>	Operating System
schneider-electric	tsxmfp064p2_firmware	*	<built-in method update of dict object at 0x7e60a8b7ee00>	Operating System
schneider-electric	tsxmfpp001m_firmware	*	<built-in method update of dict object at 0x7e60e8875100>	Operating System
schneider-electric	tsxmfpp002m_firmware	*	<built-in method update of dict object at 0x7e60a8b7fb00>	Operating System
schneider-electric	tsxmfpp004m_firmware	*	<built-in method update of dict object at 0x7e60a8b7f040>	Operating System
schneider-electric	tsxmfpp224k_firmware	*	<built-in method update of dict object at 0x7e60bbd60140>	Operating System
schneider-electric	tsxmfpp384k_firmware	*	<built-in method update of dict object at 0x7e6110c996c0>	Operating System
schneider-electric	tsxmfpp512k_firmware	*	<built-in method update of dict object at 0x7e60e8874a40>	Operating System
schneider-electric	tsxmrpc001m_firmware	*	<built-in method update of dict object at 0x7e60a8b7f840>	Operating System
schneider-electric	tsxmrpc002m_firmware	*	<built-in method update of dict object at 0x7e60a8b7d700>	Operating System
schneider-electric	tsxmrpc003m_firmware	*	<built-in method update of dict object at 0x7e60a8b7f480>	Operating System
schneider-electric	tsxmrpc007m_firmware	*	<built-in method update of dict object at 0x7e60bbd60b80>	Operating System
schneider-electric	tsxmrpc01m7_firmware	*	<built-in method update of dict object at 0x7e60bbd63480>	Operating System
schneider-electric	tsxmrpc448k_firmware	*	<built-in method update of dict object at 0x7e60a8b7c040>	Operating System
schneider-electric	tsxmrpc768k_firmware	*	<built-in method update of dict object at 0x7e60bbd63580>	Operating System
schneider-electric	tsxmrpf004m_firmware	*	<built-in method update of dict object at 0x7e60bbd619c0>	Operating System
schneider-electric	tsxmrpf008m_firmware	*	<built-in method update of dict object at 0x7e60bbd61c00>	Operating System
schneider-electric	tsxmrpp224k_firmware	*	<built-in method update of dict object at 0x7e60bbd629c0>	Operating System
schneider-electric	tsxmrpp384k_firmware	*	<built-in method update of dict object at 0x7e60bbd61240>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmcpc002m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmcpc002m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmcpc512k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmcpc512k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp001m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp001m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp002m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp002m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp004m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp004m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp512k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp512k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc001m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc001m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc002m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc002m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc003m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc003m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc007m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc007m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc01m7_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc01m7:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc768k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc768k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpf004m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpf004m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpf008m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpf008m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmcpc002m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmcpc002m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmcpc512k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmcpc512k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfp0128p2_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfp0128p2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfp064p2_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfp064p2:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp001m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp001m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp002m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp002m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp004m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp004m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp224k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp224k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp384k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp384k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmfpp512k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmfpp512k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc001m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc001m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc002m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc002m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc003m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc003m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc007m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc007m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc01m7_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc01m7:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc448k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc448k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpc768k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpc768k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpf004m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpf004m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpf008m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpf008m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpp224k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpp224k:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxmrpp384k_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxmrpp384k:-:::::::*`

References

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-01
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-01
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory