CVE-2019-6851CWE-538

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware…

published October 29, 2019

CVSS

—

EPSS

29%

Percentile

98.2

In the wild

Unconfirmed

What it is

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions), which could cause the disclosure of information from the controller when using TFTP protocol.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.29117 · 98.2th percentile
Weakness: CWE-538 · Insertion of Sensitive Information into Externally-Accessible File or Directory
Published: 2019-10-29T14:55Z

EPSS history

Timeline

29 OCT 14:55Z
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware…
cvelistv5