VULNERABILITY INTELLIGENCE

CVE-2019-6806

CVSS score7.5 HIGH

EPSS probability2.30%

CISA KEVNot currently listed

Published2019-05-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading variables in the controller using Modbus.

Primary references

cybersecurity@se.com — Mitigation, Vendor Advisory
cybersecurity@se.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory