CVE-2019-6859

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 22-04-2020 09:15

Last modified: - 03-02-2022 04:20

Total changes: - 3

Description

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

High

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=schneider-electric AND product=bmx_p34x_firmware

vendor=schneider-electric AND product=bmx_p34x AND version=-

AND

vendor=schneider-electric AND product=bmx_noe_0100_firmware

vendor=schneider-electric AND product=bmx_noe_0100 AND version=-

AND

vendor=schneider-electric AND product=bmx_noe_0110_firmware

vendor=schneider-electric AND product=bmx_noe_0110 AND version=-

AND

vendor=schneider-electric AND product=bmx_noc_0401_firmware

vendor=schneider-electric AND product=bmx_noc_0401 AND version=-

AND

vendor=schneider-electric AND product=tsx_p57x_firmware

vendor=schneider-electric AND product=tsx_p57x AND version=-

AND

vendor=schneider-electric AND product=tsx_ety_x103_firmware

vendor=schneider-electric AND product=tsx_ety_x103 AND version=-

AND

vendor=schneider-electric AND product=140_cpu6x_firmware

vendor=schneider-electric AND product=140_cpu6x AND version=-

AND

vendor=schneider-electric AND product=140_noe_771x1_firmware

vendor=schneider-electric AND product=140_noe_771x1 AND version=-

AND

vendor=schneider-electric AND product=140_noc_78x00_firmware

vendor=schneider-electric AND product=140_noc_78x00 AND version=-

AND

vendor=schneider-electric AND product=140_noc_77101_firmware

vendor=schneider-electric AND product=140_noc_77101 AND version=-

Reference

https://www.se.com/ww/en/download/document/SEVD-2019-316-02

Keywords

CVE-2019-6859

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2019-6859

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures