VULNERABILITY INTELLIGENCE

CVE-2019-6821

CVSS score6.5 MEDIUM

EPSS probability1.93%

CISA KEVNot currently listed

Published2019-05-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum.

Weakness classification

CWE-330: Use of Insufficiently Random Values

Primary references

cybersecurity@se.com — Third Party Advisory, VDB Entry
cybersecurity@se.com — Third Party Advisory, US Government Resource
cybersecurity@se.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory