CVE-2019-6856 HIGH

Published: 2020-01-06 | Last Modified: 2026-05-29 | Status: Modified

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.

Additional Descriptions (1)

CWE-754: existe una vulnerabilidad de Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (véase la notificación de seguridad para versiones específicas) que podría causar una Denegación de Servicio cuando se escriben bloques de memoria física específicos usando Modbus TCP.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-754
[email protected]	Primary	en CWE-754

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	modicon_m580_firmware	*	<built-in method update of dict object at 0x7e60ba2a4280>	Operating System
schneider-electric	modicon_m340_firmware	*	<built-in method update of dict object at 0x7e60baa34800>	Operating System
schneider-electric	tsxh5744m_firmware	*	<built-in method update of dict object at 0x7e60ba2a7e80>	Operating System
schneider-electric	tsxh5724m_firmware	*	<built-in method update of dict object at 0x7e60a88aed80>	Operating System
schneider-electric	tsxp576634m_firmware	*	<built-in method update of dict object at 0x7e60a88aff00>	Operating System
schneider-electric	tsxp57554m_firmware	*	<built-in method update of dict object at 0x7e60a88afa80>	Operating System
schneider-electric	tsxp575634m_firmware	*	<built-in method update of dict object at 0x7e60baa36fc0>	Operating System
schneider-electric	tsxp57454m_firmware	*	<built-in method update of dict object at 0x7e60ba2a4c40>	Operating System
schneider-electric	tsxp574634m_firmware	*	<built-in method update of dict object at 0x7e60baa356c0>	Operating System
schneider-electric	tsxp57354m_firmware	*	<built-in method update of dict object at 0x7e60ba2a44c0>	Operating System
schneider-electric	tsxp573634m_firmware	*	<built-in method update of dict object at 0x7e60a888da80>	Operating System
schneider-electric	tsxp57304m_firmware	*	<built-in method update of dict object at 0x7e60ba2a6ac0>	Operating System
schneider-electric	tsxp57254m_firmware	*	<built-in method update of dict object at 0x7e60ba25f700>	Operating System
schneider-electric	tsxp572634m_firmware	*	<built-in method update of dict object at 0x7e60a88adf40>	Operating System
schneider-electric	tsxp57204m_firmware	*	<built-in method update of dict object at 0x7e60ba2a55c0>	Operating System
schneider-electric	tsxp571634m_firmware	*	<built-in method update of dict object at 0x7e60ba2a5d40>	Operating System
schneider-electric	tsxp57154m_firmware	*	<built-in method update of dict object at 0x7e60ba2a76c0>	Operating System
schneider-electric	tsxp57104m_firmware	*	<built-in method update of dict object at 0x7e60a88ad940>	Operating System
schneider-electric	140cpu65150_firmware	*	<built-in method update of dict object at 0x7e60a888f700>	Operating System
schneider-electric	140cpu65160_firmware	*	<built-in method update of dict object at 0x7e60e8815280>	Operating System
schneider-electric	140cpu65260_firmware	*	<built-in method update of dict object at 0x7e60a888d000>	Operating System
schneider-electric	140cpu67261_firmware	*	<built-in method update of dict object at 0x7e60ba2a5480>	Operating System
schneider-electric	140cpu67060_firmware	*	<built-in method update of dict object at 0x7e60a88accc0>	Operating System
schneider-electric	140cpu67160_firmware	*	<built-in method update of dict object at 0x7e60baa37ec0>	Operating System
schneider-electric	140cpu67261_firmware	*	<built-in method update of dict object at 0x7e60e8814040>	Operating System
schneider-electric	140cpu67260_firmware	*	<built-in method update of dict object at 0x7e60baa36080>	Operating System
schneider-electric	140cpu65860_firmware	*	<built-in method update of dict object at 0x7e60a88ade40>	Operating System
schneider-electric	140cpu67861_firmware	*	<built-in method update of dict object at 0x7e611232c340>	Operating System
schneider-electric	140cpu65160s_firmware	*	<built-in method update of dict object at 0x7e60a88adf00>	Operating System
schneider-electric	140cpu67160s_firmware	*	<built-in method update of dict object at 0x7e60a88aee40>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m580_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m580:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:modicon_m340_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:modicon_m340:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5744m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5744m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxh5724m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxh5724m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp576634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp576634m_:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57554m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57554m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp575634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp575634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57454m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57454m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp574634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp574634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57354m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57354m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp573634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp573634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57304m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57304m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57254m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57254m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp572634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp572634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57204m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57204m_:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp571634m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp571634m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57154m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57154m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tsxp57104m_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tsxp57104m:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65150_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65150:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67261_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67261:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67060_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67060:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67160_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67160:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67261_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67261:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67260_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67260:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65860_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65860:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67861_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67861:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu65160s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu65160s:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:140cpu67160s_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:140cpu67160s:-:::::::*`

References

https://www.se.com/ww/en/download/document/SEVD-2019-344-01
Source: [email protected]

Vendor Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-016-01
Source: [email protected]

Third Party Advisory US Government Resource
https://www.se.com/ww/en/download/document/SEVD-2019-344-01
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-016-01
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory US Government Resource