CVE-2019-6845

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:schneider-electric:modicon_m580_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:modicon_m580:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:schneider-electric:modicon_m340_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:modicon_m340:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmcpc002m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmcpc002m:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmcpc512k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmcpc512k:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp001m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp001m:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp002m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp002m:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp004m:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp512k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp512k:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc001m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc001m:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc002m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc002m:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc003m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc003m:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc007m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc007m:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc01m7_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc01m7:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc768k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc768k:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpf004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpf004m:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpf008m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpf008m:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmcpc002m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmcpc002m:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmcpc512k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmcpc512k:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfp0128p2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfp0128p2:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfp064p2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfp064p2:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp001m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp001m:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp002m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp002m:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp004m:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp224k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp224k:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp384k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp384k:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmfpp512k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmfpp512k:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc001m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc001m:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc002m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc002m:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc003m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc003m:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc007m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc007m:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc01m7_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc01m7:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc448k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc448k:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpc768k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpc768k:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpf004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpf004m:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpf008m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpf008m:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpp224k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpp224k:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:schneider-electric:tsxmrpp384k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:tsxmrpp384k:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:47

Type Values Removed Values Added
References () https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-03 - Vendor Advisory () https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-03 - Vendor Advisory

Information

Published : 2019-10-29 19:15

Updated : 2024-11-21 04:47


NVD link : CVE-2019-6845

Mitre link : CVE-2019-6845

CVE.ORG link : CVE-2019-6845


JSON object : View

Products Affected

schneider-electric

  • tsxmrpc001m
  • tsxmrpf004m_firmware
  • tsxmrpp224k
  • tsxmfpp002m
  • tsxmrpc01m7_firmware
  • tsxmrpc01m7
  • tsxmfpp224k_firmware
  • tsxmrpp384k_firmware
  • tsxmcpc512k
  • tsxmrpc768k_firmware
  • modicon_m580_firmware
  • tsxmrpc003m
  • tsxmfp0128p2_firmware
  • tsxmcpc512k_firmware
  • tsxmrpc007m_firmware
  • tsxmfpp002m_firmware
  • tsxmfpp512k_firmware
  • modicon_m340_firmware
  • tsxmfpp004m_firmware
  • tsxmfpp001m_firmware
  • tsxmfpp512k
  • tsxmrpp224k_firmware
  • tsxmfp064p2_firmware
  • tsxmrpc002m_firmware
  • tsxmrpc003m_firmware
  • tsxmfp0128p2
  • tsxmrpc007m
  • tsxmrpc448k_firmware
  • modicon_m340
  • tsxmrpc002m
  • tsxmrpf008m_firmware
  • tsxmfpp004m
  • tsxmrpc001m_firmware
  • tsxmfp064p2
  • tsxmfpp224k
  • tsxmfpp384k_firmware
  • tsxmrpp384k
  • tsxmrpf008m
  • tsxmfpp384k
  • tsxmrpc768k
  • tsxmrpc448k
  • tsxmcpc002m_firmware
  • tsxmrpf004m
  • modicon_m580
  • tsxmcpc002m
  • tsxmfpp001m
CWE
CWE-319

Cleartext Transmission of Sensitive Information