cnvd-2019-38870
Vulnerability from cnvd
Title
Schneider Electric Modicon M340和Modicon M580拒绝服务漏洞
Description
Schneider Electric Modicon M580和Schneider Electric Modicon M340都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric Modicon M580是一款可编程自动化控制器。Schneider Electric Modicon M340是一款用于工业过程和基础设施的中程PLC（可编程逻辑控制器）。 使用V2.90之前版本固件的Schneider Electric Modicon M580和使用V3.10之前版本固件的Schneider Electric Modicon M340中存在安全漏洞。攻击者可利用该漏洞导致拒绝服务。
Severity
高
Patch Name
Schneider Electric Modicon M340和Modicon M580拒绝服务漏洞的补丁
Patch Description
Schneider Electric Modicon M580和Schneider Electric Modicon M340都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric Modicon M580是一款可编程自动化控制器。Schneider Electric Modicon M340是一款用于工业过程和基础设施的中程PLC（可编程逻辑控制器）。 使用V2.90之前版本固件的Schneider Electric Modicon M580和使用V3.10之前版本固件的Schneider Electric Modicon M340中存在安全漏洞。攻击者可利用该漏洞导致拒绝服务。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/

Reference
https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/
Impacted products
Name
['Schneider Electric modicon m580 firmware <V2.90', 'Schneider Electric modicon m340 firmware <V3.10']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-6829",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-6829"
    }
  },
  "description": "Schneider Electric Modicon M580\u548cSchneider Electric Modicon M340\u90fd\u662f\u6cd5\u56fd\u65bd\u8010\u5fb7\u7535\u6c14\uff08Schneider Electric\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Schneider Electric Modicon M580\u662f\u4e00\u6b3e\u53ef\u7f16\u7a0b\u81ea\u52a8\u5316\u63a7\u5236\u5668\u3002Schneider Electric Modicon M340\u662f\u4e00\u6b3e\u7528\u4e8e\u5de5\u4e1a\u8fc7\u7a0b\u548c\u57fa\u7840\u8bbe\u65bd\u7684\u4e2d\u7a0bPLC\uff08\u53ef\u7f16\u7a0b\u903b\u8f91\u63a7\u5236\u5668\uff09\u3002\n\n\u4f7f\u7528V2.90\u4e4b\u524d\u7248\u672c\u56fa\u4ef6\u7684Schneider Electric Modicon M580\u548c\u4f7f\u7528V3.10\u4e4b\u524d\u7248\u672c\u56fa\u4ef6\u7684Schneider Electric Modicon M340\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-38870",
  "openTime": "2019-11-01",
  "patchDescription": "Schneider Electric Modicon M580\u548cSchneider Electric Modicon M340\u90fd\u662f\u6cd5\u56fd\u65bd\u8010\u5fb7\u7535\u6c14\uff08Schneider Electric\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Schneider Electric Modicon M580\u662f\u4e00\u6b3e\u53ef\u7f16\u7a0b\u81ea\u52a8\u5316\u63a7\u5236\u5668\u3002Schneider Electric Modicon M340\u662f\u4e00\u6b3e\u7528\u4e8e\u5de5\u4e1a\u8fc7\u7a0b\u548c\u57fa\u7840\u8bbe\u65bd\u7684\u4e2d\u7a0bPLC\uff08\u53ef\u7f16\u7a0b\u903b\u8f91\u63a7\u5236\u5668\uff09\u3002\r\n\r\n\u4f7f\u7528V2.90\u4e4b\u524d\u7248\u672c\u56fa\u4ef6\u7684Schneider Electric Modicon M580\u548c\u4f7f\u7528V3.10\u4e4b\u524d\u7248\u672c\u56fa\u4ef6\u7684Schneider Electric Modicon M340\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "patchName": "Schneider Electric Modicon M340\u548cModicon M580\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Schneider Electric modicon m580 firmware \u003cV2.90",
      "Schneider Electric modicon m340 firmware \u003cV3.10"
    ]
  },
  "referenceLink": "https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/",
  "serverity": "\u9ad8",
  "submitTime": "2019-09-19",
  "title": "Schneider Electric Modicon M340\u548cModicon M580\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.