A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340...

0 CVSS

Vulnerability Description

A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6852

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02/

More from Schneider Electric

View All →

CVE-2025-9997

CWE-78: Improper Neutralization of Special Elements used in an OS...

Medium 5.8

CVE-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS...

Medium 5.8

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege...

High 8.4

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...

Medium 5.3

CVE-2025-6788

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists...

Medium 5.3

Affected Vendor

Schneider Electric

View all reports →

Affected Software

Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions)

Vulnerable Versions:

Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions)