ICSA-19-183-01

icsaUScisa_csaf_ot

Schneider Electric Modicon Controllers

view advisory published 2019-07-02

Successful exploitation of this vulnerability could result in a denial-of-service condition.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-6819UShigh7.5—
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the cont…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationModicon M340

    All controllers should reside in locked cabinets and never be left in the “Program” mode.

  • MitigationModicon M580

    All controllers should reside in locked cabinets and never be left in the “Program” mode.

  • MitigationModicon Premium

    All controllers should reside in locked cabinets and never be left in the “Program” mode.

  • MitigationModicon Quantum

    All controllers should reside in locked cabinets and never be left in the “Program” mode.

  • FixedModicon M340

    Modicon M580 - The vulnerability is fixed in v2.80

  • FixedModicon M580

    Modicon M580 - The vulnerability is fixed in v2.80

  • FixedModicon Premium

    Modicon M580 - The vulnerability is fixed in v2.80

  • FixedModicon Quantum

    Modicon M580 - The vulnerability is fixed in v2.80

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan