CVE-2019-6806 in Modicon M580

الملخص

بحسب MITRE

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 25/01/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-135371
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.02298
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Energy, Telecommunication, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-6806
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-6806
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-6806/