QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-6852

Back to search

CVE-2019-6852

Published: Nov 20, 2019

Modified: May 28, 2026

PUBLISHED

Description

A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.

VendorProductVersions

Schneider Electric

Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions)

affected
Modicon Controllers (M340 CPUs
affected
M340 communication modules
affected
Premium CPUs
affected
Premium communication modules
affected
Quantum CPUs

+1 more versions

Weaknesses (CWE)

CWE-200

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now