CVE & CISA-KEV Catalog

CVE-2019-6857

HIGHEPSS 73th pctl
7.5
CVSS v3
NVD

Description

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.

CWE-754

How to fix

Remediation Available
140cpu65150 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu65160 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu65160s firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu65260 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu65860 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu67060 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu67160 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu67160s firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu67260 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu67261 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
140cpu67861 firmwareNVD
Affected:< 3.60Fixed in:3.60CVE-2019-6857derived from NVD
modicon m340 firmwareNVD
Affected:< 3.01Fixed in:3.01CVE-2019-6857derived from NVD
modicon m580 firmwareNVD
Affected:< 2.80Fixed in:2.80CVE-2019-6857derived from NVD
tsxh5724m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxh5744m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57104m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57154m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp571634m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57204m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57254m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp572634m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57304m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57354m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp573634m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57454m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp574634m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp57554m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp575634m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD
tsxp576634m firmwareNVD
Affected:< 3.20Fixed in:3.20CVE-2019-6857derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

1.63%probability of exploitation in 30 days
73rdpercentile

Elevated risk: more likely to be exploited than 73% of all known CVEs.

References

Vendor Advisory1
Third-Party Advisory1
Embed a live status badge for CVE-2019-6857
CVE-2019-6857 severity badge

Markdown

[![CVE-2019-6857](https://tridentstack.com/cve/badge/CVE-2019-6857.svg)](https://tridentstack.com/cve/CVE-2019-6857)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-6857"><img src="https://tridentstack.com/cve/badge/CVE-2019-6857.svg" alt="CVE-2019-6857"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-05-29.