CVE-2019-6859 Hardcoded credentials in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications)
Hardcoded FTP credentials in Modicon Controllers allow attackers to access the web server and disclose sensitive data on unsecure networks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6859?
CVE-2019-6859 is a high-severity vulnerability in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), published on 22 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
Weakness: CWE-798
Which versions are affected by CVE-2019-6859?
It affects 10 products.
Products include Schneider-Electric 140 Cpu6x Firmware, Schneider-Electric 140 Noc 77101 Firmware, Schneider-Electric 140 Noc 78x00 Firmware, Schneider-Electric 140 Noe 771x1 Firmware, Schneider-Electric Bmx Noc 0401 Firmware, Schneider-Electric Bmx Noe 0100 Firmware and 4 more.
How do I fix CVE-2019-6859?
No fix has been published for CVE-2019-6859 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-6859 being exploited?
There is no known exploitation of CVE-2019-6859 in the wild and no public exploit code.
Other vulnerabilities in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications)
Sources
Also known as GHSA-2c7j-2jp5-mx56.