CVE-2019-6855CWE-863

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all…

published January 6, 2020

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00955 · 61.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2020-01-06T22:56Z
EPSS history
Timeline
  • 06 JAN 22:56Z
    Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all…
    cvelistv5