Skip to content
OpenAdvisories
Unscored CVE-2019-6859 EUVD-2019-16413GHSA-2c7j-2jp5-mx56

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication M…

Published Apr 22, 2020 · Updated Aug 4, 2024 · Assigned by schneider

Description

A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

Affected products

VendorProductAffectedFixed
— Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications) Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security notifications) —

References