← Vulnerability feed

Vulnerability record · CVE-2019-6811 · published 17 September 2019

CVE-2019-6811: Schneider-electric modicon quantum 140noe77101 firmware vulnerability

Schneider Electric · Modicon Quantum 140noe77101 Firmware

An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.

7.5 CVSS 3.1 High EPSS 1.3% · top 29.8% CWE-754 · CWE-754
7.5CVSS 3.1 base score, v2 5.0
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

An Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability exists in Modicon Quantum 140 NOE771x1 version 6.9 and earlier, which could cause denial of service when the module receives an IP fragmented packet with a length greater than 65535 bytes. The module then requires a power cycle to recover.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.schneider-electric.com/en/download/document/SEVD-2019-253-02/ Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2019-253-02/ Vendor Advisory

Track CVE-2019-6811 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2020-7563Schneider-electric modicon tsxety4103 firmware out-of-bounds write vulnerabilityA CWE-787: Out-of-bounds Write vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Co…EPSS 1.1%8.8CVE-2020-7564Schneider-electric modicon tsxety4103 firmware classic buffer overflow vulnerabilityA CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in the Web Server on Modicon M340, Modicon Qua…EPSS 1.1%8.1CVE-2020-7562Schneider-electric modicon tsxety4103 firmware out-of-bounds read vulnerabilityA CWE-125: Out-of-Bounds Read vulnerability exists in the Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Com…EPSS 0.90%7.5CVE-2022-37301Schneider-electric modicon m340 bmx p34-2010 firmware vulnerabilityA CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access vi…EPSS 0.75%9.8CVE-2025-39682Linux kernel TLS zero-length record handling flaw on rx_listThe Linux kernel TLS receive path mishandles zero-length records that arrive from the rx_list, breaking the assumption that a record type change cann…KEVEPSS 2.9%analysed8.7CVE-2024-3393PAN-OS DNS Security packet causes firewall reboot and maintenance modeA denial of service flaw in the DNS Security feature of Palo Alto Networks PAN-OS lets an unauthenticated attacker send a crafted packet through the …KEVEPSS 29%analysed8.8CVE-2023-41993Apple WebKit improper check allows arbitrary code executionCVE-2023-41993 is a WebKit flaw where processing web content can lead to arbitrary code execution, addressed with improved checks. Apple states it is…KEVEPSS 24%analysed7.8CVE-2023-41992Apple kernel privilege escalation via insufficient checksApple kernel code did not perform adequate checks, allowing a local attacker to elevate privileges. Apple states it is aware of a report that this is…KEVEPSS 9.5%analysed

Source: NIST National Vulnerability Database (record CVE-2019-6811), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.