CVE-2019-6857
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
- Record
CVE-2019-6857- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-754
- Updated
- 2026-11-02
CVE List
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
- Record
CVE-2019-6857- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
EUVDEUVD-2019-16411
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
- Record
EUVD-2019-16411- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rfpc-4j7v-fqjp
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
- Record
GHSA-rfpc-4j7v-fqjp- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
Affected products
- schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions)
- schneider-electric 140cpu65150 firmware
- schneider-electric 140cpu65160 firmware
- schneider-electric 140cpu65160s firmware
- schneider-electric 140cpu65260 firmware
- schneider-electric 140cpu65860 firmware
- schneider-electric 140cpu67060 firmware
- schneider-electric 140cpu67160 firmware
- schneider-electric 140cpu67160s firmware
- schneider-electric 140cpu67260 firmware
- schneider-electric 140cpu67261 firmware
- schneider-electric 140cpu67861 firmware
Show 18 moreShow less
- schneider-electric modicon m340 firmware
- schneider-electric modicon m580 firmware
- schneider-electric tsxh5724m firmware
- schneider-electric tsxh5744m firmware
- schneider-electric tsxp57104m firmware
- schneider-electric tsxp57154m firmware
- schneider-electric tsxp571634m firmware
- schneider-electric tsxp57204m firmware
- schneider-electric tsxp57254m firmware
- schneider-electric tsxp572634m firmware
- schneider-electric tsxp57304m firmware
- schneider-electric tsxp57354m firmware
- schneider-electric tsxp573634m firmware
- schneider-electric tsxp57454m firmware
- schneider-electric tsxp574634m firmware
- schneider-electric tsxp57554m firmware
- schneider-electric tsxp575634m firmware
- schneider-electric tsxp576634m firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-6857 is a high vulnerability (CVSS 7.5) in Schneider Electric Se Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see Security Notification For Specific Versions), published January 6, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. No source names a fixed version.