CVE-2019-6859

CVE-2019-6859

Vendor N/A
Product Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications)
Weakness CWE-798 · Hardcoded credentials
Published April 22, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

Key dates

02Disclosure timeline

April 22, 2020 CVE published
August 4, 2024 Record updated