CVE-2019-6851
high · 7.5A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.
7.5
CVSS
29.9%
EPSS (exploit prob.)
98th
EPSS percentile
2019-10-29
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-538CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| schneider-electric | modicon_m580_firmware | all versions |
| schneider-electric | modicon_m580 | all versions |
| schneider-electric | modicon_m340_firmware | all versions |
| schneider-electric | modicon_m340 | all versions |
| schneider-electric | tsxmcpc002m_firmware | all versions |
| schneider-electric | tsxmcpc002m | all versions |
| schneider-electric | tsxmcpc512k_firmware | all versions |
| schneider-electric | tsxmcpc512k | all versions |
| schneider-electric | tsxmfpp001m_firmware | all versions |
| schneider-electric | tsxmfpp001m | all versions |
| schneider-electric | tsxmfpp002m_firmware | all versions |
| schneider-electric | tsxmfpp002m | all versions |
| schneider-electric | tsxmfpp004m_firmware | all versions |
| schneider-electric | tsxmfpp004m | all versions |
| schneider-electric | tsxmfpp512k_firmware | all versions |
| schneider-electric | tsxmfpp512k | all versions |
| schneider-electric | tsxmrpc001m_firmware | all versions |
| schneider-electric | tsxmrpc001m | all versions |
| schneider-electric | tsxmrpc002m_firmware | all versions |
| schneider-electric | tsxmrpc002m | all versions |
| schneider-electric | tsxmrpc003m_firmware | all versions |
| schneider-electric | tsxmrpc003m | all versions |
| schneider-electric | tsxmrpc007m_firmware | all versions |
| schneider-electric | tsxmrpc007m | all versions |
| schneider-electric | tsxmrpc01m7_firmware | all versions |
| schneider-electric | tsxmrpc01m7 | all versions |
| schneider-electric | tsxmrpc768k_firmware | all versions |
| schneider-electric | tsxmrpc768k | all versions |
| schneider-electric | tsxmrpf004m_firmware | all versions |
| schneider-electric | tsxmrpf004m | all versions |
| schneider-electric | tsxmrpf008m_firmware | all versions |
| schneider-electric | tsxmrpf008m | all versions |
| schneider-electric | tsxmcpc002m_firmware | all versions |
| schneider-electric | tsxmcpc002m | all versions |
| schneider-electric | tsxmcpc512k_firmware | all versions |
| schneider-electric | tsxmcpc512k | all versions |
| schneider-electric | tsxmfp0128p2_firmware | all versions |
| schneider-electric | tsxmfp0128p2 | all versions |
| schneider-electric | tsxmfp064p2_firmware | all versions |
| schneider-electric | tsxmfp064p2 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-6851