CVE-2019-6821
Summary
| CVE | CVE-2019-6821 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-05-22 20:29:00 UTC |
| Updated | 2022-02-03 14:30:00 UTC |
| Description | CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum. |
Risk And Classification
Problem Types: CWE-330
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Malformed Request | BID | www.securityfocus.com | |
| Schneider Electric Modicon Controllers | CISA | MISC | ics-cert.us-cert.gov | |
| Security Notification - Modicon Controller | Schneider Electric | MISC | www.schneider-electric.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 590509 Schneider Electric Modicon Controllers Use of Insufficiently Random Values Vulnerability (ICSA-19-136-01)