CVE-2019-6855 HIGH

Published: 2020-01-06 | Last Modified: 2024-11-21 | Status: Modified

Description

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.

Additional Descriptions (1)

Existe una vulnerabilidad de Autorización Incorrecta en EcoStruxure Control Expert (todas las versiones anteriores a la 14.1 Hot Fix), Unity Pro (todas las versiones), Modicon M340 (todas las versiones anteriores a la V3.20) , y Modicon M580 (todas las versiones anteriores a la V3.10), que podría causar un bypass del proceso de autenticación entre EcoStruxure Control Expert y los controladores M340 y M580

CVSS Metrics

Base Score: 7.3 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	LOW
Integrity Impact	LOW
Availability Impact	LOW

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.4

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-863
[email protected]	Primary	en CWE-863

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	ecostruxure_control_expert	*	<built-in method update of dict object at 0x7e6108405c00>	Application
schneider-electric	ecostruxure_control_expert	14.1	<built-in method update of dict object at 0x7e613410ce80>	Application
schneider-electric	unity_pro	*	<built-in method update of dict object at 0x7e60b847bfc0>	Application
schneider-electric	modicon_m580_bmep584040_firmware	*	<built-in method update of dict object at 0x7e60b8479000>	Operating System
schneider-electric	modicon_m580_bmeh584040_firmware	*	<built-in method update of dict object at 0x7e6108407980>	Operating System
schneider-electric	modicon_m580_bmep586040_firmware	*	<built-in method update of dict object at 0x7e6108404780>	Operating System
schneider-electric	modicon_m580_bmeh586040_firmware	*	<built-in method update of dict object at 0x7e60bae49a80>	Operating System
schneider-electric	modicon_m580_bmep581020_firmware	*	<built-in method update of dict object at 0x7e613c21b380>	Operating System
schneider-electric	modicon_m580_bmep582020_firmware	*	<built-in method update of dict object at 0x7e60a8a694c0>	Operating System
schneider-electric	modicon_m580_bmep582040_firmware	*	<built-in method update of dict object at 0x7e6108406b40>	Operating System
schneider-electric	modicon_m580_bmep583020_firmware	*	<built-in method update of dict object at 0x7e60ba0ac880>	Operating System
schneider-electric	modicon_m580_bmep583040_firmware	*	<built-in method update of dict object at 0x7e60b84795c0>	Operating System
schneider-electric	modicon_m580_bmep584020_firmware	*	<built-in method update of dict object at 0x7e60ba0ac900>	Operating System
schneider-electric	modicon_m580_bmep585040_firmware	*	<built-in method update of dict object at 0x7e60bb886140>	Operating System
schneider-electric	modicon_m580_bmeh582040_firmware	*	<built-in method update of dict object at 0x7e60bb884c40>	Operating System
schneider-electric	modicon_m580_bmep584040s_firmware	*	<built-in method update of dict object at 0x7e60bb884c00>	Operating System
schneider-electric	modicon_m580_bmeh584040s_firmware	*	<built-in method update of dict object at 0x7e60bb8867c0>	Operating System
schneider-electric	modicon_m580_bmeh586040s_firmware	*	<built-in method update of dict object at 0x7e6112cb56c0>	Operating System
schneider-electric	modicon_m580_bmep582040s_firmware	*	<built-in method update of dict object at 0x7e61074681c0>	Operating System
schneider-electric	modicon_m340_bmxp3420302_firmware	*	<built-in method update of dict object at 0x7e60a8a69f80>	Operating System
schneider-electric	modicon_m340_bmxp342020_firmware	*	<built-in method update of dict object at 0x7e60a88adb40>	Operating System
schneider-electric	modicon_m340_bmxp342000_firmware	*	<built-in method update of dict object at 0x7e6111c1f340>	Operating System
schneider-electric	modicon_m340_bmxp341000_firmware	*	<built-in method update of dict object at 0x7e60ba0ae1c0>	Operating System
schneider-electric	modicon_m340_bmxp3420102_firmware	*	<built-in method update of dict object at 0x7e60ba0aea40>	Operating System
schneider-electric	modicon_m340_bmxp3420302_firmware	*	<built-in method update of dict object at 0x7e60a88af3c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:schneider-electric:ecostruxure_control_expert::::::::`
Yes	`cpe:2.3:a:schneider-electric:ecostruxure_control_expert:14.1:-::::::`
Yes	`cpe:2.3:a:schneider-electric:unity_pro::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep586040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep581020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep583020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep583040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep585040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmeh582040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep584040s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep584040s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmeh584040s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmeh586040s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580_bmep582040s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342020:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp342000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp341000:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420102:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340_bmxp3420302:-:::::::*`

References

https://www.se.com/ww/en/download/document/SEVD-2019-344-02/
Source: [email protected]

Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2019-344-02/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory