Schneider Electric SE Modicon M580 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Schneider Electric SE Modicon M580, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2019-6829schneider electric semodicon m340+3
EPSS score
1.61%
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2.90) and Modicon M340 (firmware version prior to V3.10), which could cause a possible denial of service when writing to specific memory addresses in the controller over Modbus.7.1CVE-2019-6830schneider electric semodicon m580+1
EPSS score
1.10%
A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller.7.8CVE-2019-6809schneider electric semodicon m340+5
EPSS score
1.76%
A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2.90), Modicon M340 (firmware versions prior to V3.10), Modicon Premium (all versions), Modicon Quantum (all versions), which could cause a possible denial of service when reading invalid data from the controller.7.8CVE-2019-6828schneider electric semodicon m340+5
EPSS score
1.53%
A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90), Modicon M340 (firmware version prior to V3.10), Modicon Premium (all versions), and Modicon Quantum (all versions), which could cause a possible denial of service when reading specific coils and registers in the controller over Modbus.