Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2019-6820 Details
Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC drive controller, Modicon M241, Modicon M251, Modicon M258, Modicon LMC058, Modicon LMC078, PacDrive Eco ,PacDrive Pro, PacDrive Pro2
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 28, 2026Exploitation: NoneAutomatable: YesTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.schneider-electric.com/en/download/document/SEVD-2019-134-02/ | CVE | Vendor Advisory |
| https://www.schneider-electric.com/en/download/document/SEVD-2019-134-02/ | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| schneider-electric modicon m100 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon m100 | All versions |
CPE
Remediation
| |
| schneider-electric modicon m200 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon m200 | All versions |
CPE
Remediation
| |
| schneider-electric modicon m221 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon m221 | All versions |
CPE
Remediation
| |
| schneider-electric atv imc drive controller firmware | All versions |
CPE
Remediation
| |
| schneider-electric atv imc drive controller | All versions |
CPE
Remediation
| |
| schneider-electric modicon m241 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon m241 | All versions |
CPE
Remediation
| |
| schneider-electric modicon m251 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon m251 | All versions |
CPE
Remediation
| |
| schneider-electric modicon m258 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon m258 | All versions |
CPE
Remediation
| |
| schneider-electric modicon lmc058 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon lmc058 | All versions |
CPE
Remediation
| |
| schneider-electric modicon lmc078 firmware | All versions |
CPE
Remediation
| |
| schneider-electric modicon lmc078 | All versions |
CPE
Remediation
| |
| schneider-electric pacdrive eco firmware | All versions |
CPE
Remediation
| |
| schneider-electric pacdrive eco | All versions |
CPE
Remediation
| |
| schneider-electric pacdrive pro firmware | All versions |
CPE
Remediation
| |
| schneider-electric pacdrive pro | All versions |
CPE
Remediation
| |
| schneider-electric pacdrive pro2 firmware | All versions |
CPE
Remediation
| |
| schneider-electric pacdrive pro2 | All versions |
CPE
Remediation
| |
Change History
38 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 28, 2026 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 3, 2022 | Modified Analysis | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Jan 31, 2022 | CPE Deprecation Remap | [email protected] |
| Aug 26, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 26, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 26, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 26, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 26, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Aug 19, 2021 | CPE Deprecation Remap | [email protected] |
| Oct 9, 2019 | CVE Modified | [email protected] |
| May 24, 2019 | Initial Analysis | [email protected] |