CVE-2019-6848
high · 8.6A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module.
8.6
CVSS
33.0%
EPSS (exploit prob.)
98th
EPSS percentile
2019-10-29
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-755
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| schneider-electric | modicon_m580_firmware | all versions |
| schneider-electric | modicon_m580 | all versions |
| schneider-electric | modicon_bmenoc_0311_firmware | all versions |
| schneider-electric | modicon_bmenoc_0311 | all versions |
| schneider-electric | modicon_bmenoc_0321_firmware | all versions |
| schneider-electric | modicon_bmenoc_0321 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-6848