Details of VAR-201910-0581

ID

VAR-201910-0581

CVE

CVE-2019-6848

TITLE

plural Modicon Vulnerability related to input validation in products

Trust: 0.8

sources: JVNDB: JVNDB-2019-011421

DESCRIPTION

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the controller/communication module. Modicon M580 , Modicon BMENOC 0311 , Modicon BMENOC 0321 Contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Modicon M580 / BMENOC 0311 / BMENOC 0321 are all programmable logic controllers from Schneider Electric. Modicon M580 / BMENOC 0311 / BMENOC 0321 has a denial of service vulnerability

Trust: 2.34

sources: NVD: CVE-2019-6848 // JVNDB: JVNDB-2019-011421 // CNVD: CNVD-2019-39706 // IVD: fed65eee-91a3-40e2-a97a-6d80631f09b6

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: fed65eee-91a3-40e2-a97a-6d80631f09b6 // CNVD: CNVD-2019-39706

AFFECTED PRODUCTS

vendor:	schneider electric	model:	modicon m580	scope:	eq	version:	-	Trust: 1.0
vendor:	schneider electric	model:	modicon bmenoc 0311	scope:	eq	version:	-	Trust: 1.0
vendor:	schneider electric	model:	modicon bmenoc 0321	scope:	eq	version:	-	Trust: 1.0
vendor:	schneider electric	model:	modicon bmenoc 0311	scope:	-	version:	-	Trust: 0.8
vendor:	schneider electric	model:	modicon bmenoc 0321	scope:	-	version:	-	Trust: 0.8
vendor:	schneider electric	model:	modicon m580	scope:	-	version:	-	Trust: 0.8
vendor:	schneider	model:	electric modicon m580	scope:	-	version:	-	Trust: 0.6
vendor:	modicon m580	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	modicon bmenoc 0311	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	modicon bmenoc 0321	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: fed65eee-91a3-40e2-a97a-6d80631f09b6 // CNVD: CNVD-2019-39706 // JVNDB: JVNDB-2019-011421 // NVD: CVE-2019-6848

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-6848
value:	HIGH
Trust: 1.0
NVD:	CVE-2019-6848
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2019-39706
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201910-405
value:	HIGH
Trust: 0.6
IVD:	fed65eee-91a3-40e2-a97a-6d80631f09b6
value:	HIGH
Trust: 0.2

nvd@nist.gov:	CVE-2019-6848
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-39706
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	fed65eee-91a3-40e2-a97a-6d80631f09b6
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

nvd@nist.gov:	CVE-2019-6848
baseSeverity:	HIGH
baseScore:	8.6
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	4.0
version:	3.1
Trust: 1.0
NVD:	CVE-2019-6848
baseSeverity:	HIGH
baseScore:	8.6
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: fed65eee-91a3-40e2-a97a-6d80631f09b6 // CNVD: CNVD-2019-39706 // JVNDB: JVNDB-2019-011421 // CNNVD: CNNVD-201910-405 // NVD: CVE-2019-6848

PROBLEMTYPE DATA

problemtype:	CWE-755	Trust: 1.0
problemtype:	CWE-20	Trust: 0.8

sources: JVNDB: JVNDB-2019-011421 // NVD: CVE-2019-6848

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201910-405

TYPE

Input validation error

Trust: 0.8

sources: IVD: fed65eee-91a3-40e2-a97a-6d80631f09b6 // CNNVD: CNNVD-201910-405

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-011421

PATCH

title:	SEVD-2019-281-04	url:	https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-04	Trust: 0.8
title:	Patch for Modicon M580 / BMENOC 0311 / BMENOC 0321 Denial of Service Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/188887	Trust: 0.6

sources: CNVD: CNVD-2019-39706 // JVNDB: JVNDB-2019-011421

EXTERNAL IDS

db:	NVD	id:	CVE-2019-6848	Trust: 3.2
db:	SCHNEIDER	id:	SEVD-2019-281-04	Trust: 1.6
db:	CNVD	id:	CNVD-2019-39706	Trust: 0.8
db:	CNNVD	id:	CNNVD-201910-405	Trust: 0.8
db:	JVNDB	id:	JVNDB-2019-011421	Trust: 0.8
db:	TALOS	id:	TALOS-2019-0866	Trust: 0.6
db:	IVD	id:	FED65EEE-91A3-40E2-A97A-6D80631F09B6	Trust: 0.2

sources: IVD: fed65eee-91a3-40e2-a97a-6d80631f09b6 // CNVD: CNVD-2019-39706 // JVNDB: JVNDB-2019-011421 // CNNVD: CNNVD-201910-405 // NVD: CVE-2019-6848

REFERENCES

url:	https://nvd.nist.gov/vuln/detail/cve-2019-6848	Trust: 2.0
url:	https://www.se.com/ww/en/download/document/sevd-2019-281-04/	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6848	Trust: 0.8
url:	https://www.schneider-electric.com/ww/en/download/document/sevd-2019-281-04	Trust: 0.6
url:	https://www.talosintelligence.com/vulnerability_reports/talos-2019-0866	Trust: 0.6

sources: CNVD: CNVD-2019-39706 // JVNDB: JVNDB-2019-011421 // CNNVD: CNNVD-201910-405 // NVD: CVE-2019-6848

CREDITS

Discovered by Jared Rittle of Cisco Talos

Trust: 0.6

sources: CNNVD: CNNVD-201910-405

SOURCES

db:	IVD	id:	fed65eee-91a3-40e2-a97a-6d80631f09b6
db:	CNVD	id:	CNVD-2019-39706
db:	JVNDB	id:	JVNDB-2019-011421
db:	CNNVD	id:	CNNVD-201910-405
db:	NVD	id:	CVE-2019-6848

LAST UPDATE DATE

2024-11-23T22:21:25.744000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-39706	date:	2019-11-08T00:00:00
db:	JVNDB	id:	JVNDB-2019-011421	date:	2019-11-07T00:00:00
db:	CNNVD	id:	CNNVD-201910-405	date:	2021-04-20T00:00:00
db:	NVD	id:	CVE-2019-6848	date:	2024-11-21T04:47:16.447

SOURCES RELEASE DATE

db:	IVD	id:	fed65eee-91a3-40e2-a97a-6d80631f09b6	date:	2019-11-08T00:00:00
db:	CNVD	id:	CNVD-2019-39706	date:	2019-11-06T00:00:00
db:	JVNDB	id:	JVNDB-2019-011421	date:	2019-11-07T00:00:00
db:	CNNVD	id:	CNNVD-201910-405	date:	2019-10-08T00:00:00
db:	NVD	id:	CVE-2019-6848	date:	2019-10-29T19:15:22.330