Back to CVE Browser

CVE-2019-6813

HIGH

7.5

CVSS Severity Score

EPSS Score0.0100%

EPSS Percentile27.27th

PublishedSep 17, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions), which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device.

Affected Platforms (CPE)

💻

Schneider Electric

Modicon M340 Firmware

All versions

💻

Schneider Electric

Bmxnor0200h Firmware

All versions

References & Advisories

🔗 https://security.cse.iitk.ac.in/responsible-disclosure

🔗 https://www.schneider-electric.com/en/download/document/SEVD-2019-225-02/

🔗 https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/

🔗 https://security.cse.iitk.ac.in/responsible-disclosure

🔗 https://www.schneider-electric.com/en/download/document/SEVD-2019-225-02/

🔗 https://www.schneider-electric.com/en/download/document/SEVD-2019-225-03/

Related Vulnerabilities

CVE-2019-68457.5

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , M...

CVE-2019-68097.5

A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware vers...

CVE-2019-68287.5

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version ...

CVE-2019-68517.5

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Q...