{"id": "CVE-2019-6857", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-01-06T23:15:11.377", "references": [{"url": "https://www.se.com/ww/en/download/document/SEVD-2019-344-01", "tags": ["Vendor Advisory"], "source": "cybersecurity@se.com"}, {"url": "https://www.us-cert.gov/ics/advisories/icsa-20-016-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cybersecurity@se.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-754"}]}, {"type": "Secondary", "source": "cybersecurity@se.com", "description": [{"lang": "en", "value": "CWE-754"}]}], "descriptions": [{"lang": "en", "value": "A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP."}, {"lang": "es", "value": "CWE-754: Hay una vulnerabilidad de Comprobaci\u00f3n Inapropiada de Condiciones Inusuales o Excepcionales en Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (v\u00e9ase la notificaci\u00f3n de seguridad para versiones espec\u00edficas) que podr\u00eda causar una Denegaci\u00f3n de Servicio del controlador cuando se leen bloques de memoria espec\u00edficos usando Modbus TCP."}], "lastModified": "2022-02-03T15:19:57.723", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FDEB227-D50B-402C-9C11-E29F52BC10BB", "versionEndExcluding": "2.80"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E876C738-ABF6-4864-98A6-1E06E96A0DF4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "606AFE88-8C9A-4D18-9209-1193B628669F", "versionEndExcluding": "3.01"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "138681A2-0146-492B-8E10-06849FC27C6E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxh5744m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F6FF401-ED15-45EE-9A84-171166BF4414", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxh5744m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8B57B894-5AA4-4412-B425-7338CB2FFA3C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxh5724m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70CD95A2-9FAE-4A7E-8331-8904C0E0CE3D", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxh5724m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1F56BA4-6A19-44FB-8555-7360C77F83AF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp576634m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5EEE1F8-0DCA-4D18-A022-5DBE980F3A16", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp576634m_:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7F683564-419D-418B-A4D5-BB203F709DD7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57554m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED646076-2294-4253-92BF-B95D5D5E87A4", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57554m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5572E616-5D86-46FF-AEA7-4A12E66F0ED4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp575634m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98B1574C-2FC7-4A3C-B260-D8372A268F4A", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp575634m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "57BF89C2-27F8-4FF5-9E4F-4F0CB6C2F0E9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57454m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "853895C6-5EDF-4767-9653-F5F7826B4A7E", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57454m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CC537593-1AB7-438E-AB71-EDB469A1DFF7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp574634m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC9FBA4C-DA99-4F22-9168-ECD281B090C3", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp574634m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE60505D-0211-4E8C-B32C-988E25698B1E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57354m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD7766E8-40EB-4C72-8234-C8D997F98F6C", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57354m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FAE46047-D9AF-4720-A130-A0F989423F82"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp573634m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9246F10-84D1-4AE0-BF1A-B61EA1E965A2", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp573634m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80500883-2825-46DD-8ED9-4F324A4494CC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57304m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "889586D3-B64F-42DA-8872-DD44C9790881", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57304m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5FDBAB3-C8C2-47F6-ACAA-B89BA53849B9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57254m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6EBCADE-8F8C-402B-8FB6-62237168E788", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57254m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "57B75D71-11CA-4DDF-849A-08A9D84C95AC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp572634m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33E3F062-3874-4EB6-829B-285B428E982E", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp572634m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EA2094F4-976F-44FA-A7E5-93E20A80DA00"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57204m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43BE3D1E-5F7D-409F-A932-073D5A566180", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57204m_:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0E25651C-E4B5-47A2-A6CE-79F7ECAE246E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp571634m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1DEF9B5-6BC0-43A7-AD74-81F9D23BA843", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp571634m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "31A5DCC8-9E3D-4919-9DE3-73FC8733E73D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57154m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E358F77-1F8F-4F2F-A54C-B5F2373EFEE6", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57154m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5CC8F0AB-C4A8-40B3-88E0-92F52EA05692"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tsxp57104m_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56724F0C-2DA8-4710-9D82-EE51FA9B062C", "versionEndExcluding": "3.20"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tsxp57104m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "587226C6-6BE2-4A42-B593-34498F647B24"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu65150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C81EF48-8A20-48A4-9601-512800EC4770", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu65150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC3E5496-C3D0-4DF4-A9AF-F227F889840E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu65160_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B71AB2E0-FE0C-4ABE-B443-2DE3C271909E", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu65160:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B2C2AF70-F0BB-4D17-901C-1FCBECDC44FB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu65260_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DE05725-46D0-4058-B5FB-743B3F353285", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu65260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D7304B0-EE18-454B-B3F0-5EF387285D90"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67261_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD28EA1B-C90C-4764-BAE4-CB3314C053E4", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67261:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "164AEEA1-666F-428A-BFCB-5DEEEFE1D771"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67060_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90499B24-178F-47E0-8B02-434B47C748EE", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67060:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8AF2A7A3-89EF-480D-8E6E-20E11CF60A97"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67160_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41678F69-BE37-401E-ADD2-87B919767020", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67160:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3870E952-7A32-43DA-8C66-DE43C862639B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67261_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD28EA1B-C90C-4764-BAE4-CB3314C053E4", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67261:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "164AEEA1-666F-428A-BFCB-5DEEEFE1D771"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67260_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBA6F869-D33E-4510-A292-CB41BAB41129", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C9E4FCBA-4980-4C8F-A185-5E9C4CF9E8B5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu65860_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDC8ABE1-DE6C-485D-9149-F09C5045B40C", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu65860:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9B8230FD-0C0A-467C-9BAD-09257739D462"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67861_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED500E27-ADAC-467A-9D63-DFB073748525", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67861:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CF97B5A6-960F-42BA-A397-09C819A3200C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu65160s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7B10B14-841E-4F8B-94A2-6F0807ED53E9", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu65160s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "95E48F27-F241-4491-AFF7-8BD562F21A52"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:140cpu67160s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EBB9390-E2A9-4F52-A2C5-924C41C1886E", "versionEndExcluding": "3.60"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:140cpu67160s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "71C1C17A-9111-49B8-A2CE-3A2FB87616F1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cybersecurity@se.com"}
