CVE-2019-6828CWE-248

CVE-2019-6828: vulnerability in Schneider Electric SE Modicon M580

Published · Updated

Follow this CVE+ Monitor Modicon M340+ Monitor Modicon Quantum

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.
Affected products
Schneider Electric SE · Modicon M340Schneider Electric SE · Modicon M580Schneider Electric SE · Modicon PremiumSchneider Electric SE · Modicon Quantum
Related CVEs — Schneider Electric SE Modicon M580

In the same product, most dangerous first.

CVE-2019-6809—CVE-2019-6809EPSS 1.8%CVE-2019-6829HIGHCVE-2019-6829EPSS 1.6%CVE-2019-6830—CVE-2019-6830EPSS 1.1%