VYPR
← All advisories
High severity7.3NVD Advisory· Published Jan 6, 2020· Updated Jun 17, 2026

CVE-2019-6855

CVE-2019-6855

Description

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.

Affected products

29
  • Schneider Electric/Ecostruxure Control Expert2 versions
    cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*range: <14.1
    • cpe:2.3:a:schneider-electric:ecostruxure_control_expert:14.1:-:*:*:*:*:*:*
  • Schneider Electric/Unity Pro2 versions
    cpe:2.3:a:schneider-electric:unity_pro:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:schneider-electric:unity_pro:*:*:*:*:*:*:*:*
    • (no CPE)range: all versions
  • Schneider Electric/Modicon M340 Bmxp3420302h Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp341000_firmware:*:*:*:*:*:*:*:*
    Range: <3.20
  • Schneider Electric/Modicon M340 Bmxp3420302 Firmware2 versions
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp342000_firmware:*:*:*:*:*:*:*:*range: <3.20
    • cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420302_firmware:*:*:*:*:*:*:*:*range: <3.20
  • Schneider Electric/Modicon M340 Bmxp3420102 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp3420102_firmware:*:*:*:*:*:*:*:*
    Range: <3.20
  • Schneider Electric/Modicon M340 Bmxp342020 Firmware
    cpe:2.3:o:schneider-electric:modicon_m340_bmxp342020_firmware:*:*:*:*:*:*:*:*
    Range: <3.20
  • Schneider Electric/Modicon M580 Bmep586040c6 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh582040_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh584040s_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmeh586040s_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040s_firmware:*:*:*:*:*:*:*:*range: <3.10
  • Schneider Electric/Modicon M580 Bmep582040h Firmware2 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep581020_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582040_firmware:*:*:*:*:*:*:*:*range: <3.10
  • Schneider Electric/Modicon M580 Firmware7 versions
    cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep582020_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep583020_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep583040_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584020_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584040_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep584040s_firmware:*:*:*:*:*:*:*:*range: <3.10
    • cpe:2.3:o:schneider-electric:modicon_m580_bmep586040_firmware:*:*:*:*:*:*:*:*range: <3.10
  • Schneider Electric/Modicon M580 Bmep585040c Firmware
    cpe:2.3:o:schneider-electric:modicon_m580_bmep585040_firmware:*:*:*:*:*:*:*:*
    Range: <3.10
  • Schneider Electric/EcoStruxure Control Expertdescription
  • Schneider Electric/Modicon M580 CPUllm-fuzzy
    Range: <V3.10
  • EcoStruxure/Control Expertllm-fuzzy
    Range: <14.1 Hot Fix
  • Schneider Electric/Modicon M340llm-fuzzy
    Range: <V3.20

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.