CVE-2019-6821

CVE-2019-6821

Vendor N/A

Product Modicon Controllers, Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum

Weakness CWE-330 · Insufficient randomness

Published May 22, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet communication in Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum.

Key dates

02Disclosure timeline

May 22, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-6821 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/330.html

Related vulnerabilities

Identifiers

CVE CVE-2019-6821

CWE CWE-330

Affected versions

Vendor N/A

Product Modicon Controllers, Modicon M580 firmware versions prior to V2.30, and all firmware versions of Modicon M340, Modicon Premium, Modicon Quantum

Affected Modicon Controllers, Modicon M580 firmware versions prior to V2.30, and all firmware versions of Mod

01Description

02Disclosure timeline

03References

04Related CVE