CVE-2019-6855

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.

• schneider-electric ecostruxure control expert (< 14.1) • schneider-electric ecostruxure control expert 14.1 • schneider-electric unity pro • schneider-electric modicon m580 bmep584040 firmware (< 3.10) • schneider-electric modicon m580 bmeh584040 firmware (< 3.10) • schneider-electric modicon m580 bmep586040 firmware (< 3.10) • schneider-electric modicon m580 bmeh586040 firmware (< 3.10) • schneider-electric modicon m580 bmep581020 firmware (< 3.10) • schneider-electric modicon m580 bmep582020 firmware (< 3.10) • schneider-electric modicon m580 bmep582040 firmware (< 3.10) • schneider-electric modicon m580 bmep583020 firmware (< 3.10) • schneider-electric modicon m580 bmep583040 firmware (< 3.10) • schneider-electric modicon m580 bmep584020 firmware (< 3.10) • schneider-electric modicon m580 bmep585040 firmware (< 3.10) • schneider-electric modicon m580 bmeh582040 firmware (< 3.10) • schneider-electric modicon m580 bmep584040s firmware (< 3.10) • schneider-electric modicon m580 bmeh584040s firmware (< 3.10) • schneider-electric modicon m580 bmeh586040s firmware (< 3.10) • schneider-electric modicon m580 bmep582040s firmware (< 3.10) • schneider-electric modicon m340 bmxp3420302 firmware (< 3.20) • schneider-electric modicon m340 bmxp342020 firmware (< 3.20) • schneider-electric modicon m340 bmxp342000 firmware (< 3.20) • schneider-electric modicon m340 bmxp341000 firmware (< 3.20) • schneider-electric modicon m340 bmxp3420102 firmware (< 3.20)