CVSS 3.1
7.3 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LCVE-2019-6855
High (7.3) in schneider-electric. EPSS 1.0% chance of exploitation in the next 30 days.
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-11-01)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:ecostruxure_control_expert
- schneider-electric:modicon_m340_bmxp341000_firmware
- schneider-electric:modicon_m340_bmxp342000_firmware
- schneider-electric:modicon_m340_bmxp3420102_firmware
- schneider-electric:modicon_m340_bmxp342020_firmware
- schneider-electric:modicon_m340_bmxp3420302_firmware
- schneider-electric:modicon_m580_bmeh582040_firmware
- schneider-electric:modicon_m580_bmeh584040_firmware
- schneider-electric:modicon_m580_bmeh584040s_firmware
- schneider-electric:modicon_m580_bmeh586040_firmware
- schneider-electric:modicon_m580_bmeh586040s_firmware
- schneider-electric:modicon_m580_bmep581020_firmware
- schneider-electric:modicon_m580_bmep582020_firmware
- schneider-electric:modicon_m580_bmep582040_firmware
- schneider-electric:modicon_m580_bmep582040s_firmware
- schneider-electric:modicon_m580_bmep583020_firmware
- schneider-electric:modicon_m580_bmep583040_firmware
- schneider-electric:modicon_m580_bmep584020_firmware
- schneider-electric:modicon_m580_bmep584040_firmware
- schneider-electric:modicon_m580_bmep584040s_firmware
- schneider-electric:modicon_m580_bmep585040_firmware
- schneider-electric:modicon_m580_bmep586040_firmware
- schneider-electric:unity_pro