CVEvulnerability

CVE-2019-6859

7.5 HIGH Published 2020-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-798

Description

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

Affected configurations

• schneider-electric bmx p34x firmware • schneider-electric bmx noe 0100 firmware • schneider-electric bmx noe 0110 firmware • schneider-electric bmx noc 0401 firmware • schneider-electric tsx p57x firmware • schneider-electric tsx ety x103 firmware • schneider-electric 140 cpu6x firmware • schneider-electric 140 noe 771x1 firmware • schneider-electric 140 noc 78x00 firmware • schneider-electric 140 noc 77101 firmware

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References