High severity8.2NVD Advisory· Published May 22, 2019· Updated Jun 17, 2026
CVE-2019-6820
CVE-2019-6820
Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Affected products
18- cpe:2.3:o:schneider-electric:atv_imc_drive_controller_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_lmc058_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_lmc078_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m100_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m200_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m241_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m251_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:modicon_m258_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:pacdrive_eco_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:pacdrive_pro2_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:pacdrive_pro_firmware:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.schneider-electric.com/en/download/document/SEVD-2019-134-02/nvdVendor Advisory
News mentions
0No linked articles in our index yet.