CVE-2019-6811: schneider electric se modicon quantum 140 noe771x1

Vulnerability summary

CVE-2019-6811 is a high (CVSS 7.5) vulnerability in schneider electric se modicon quantum 140 noe771x1. EPSS estimates a 1.31% chance of exploitation in the next 30 days, higher than 70.2% of scored vulnerabilities.

Timeline

1. 17-09-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.

• CWE-754Improper Check for Unusual or Exceptional ConditionsThe product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.