CVE:CVE-2019-6820
CNNVD:CNNVD-201905-932
Schneider Electric Modicon M100等都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric Modicon M100是一款可编程逻辑控制器。Schneider Electric Modicon LMC078是一款用于运动控制器。Schneider Electric ATV IMC drive controller是一款驱动控制器。
多款Schneider Electric产品中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品及版本受到影响：Schneider Electric Modicon M100（全部版本）；Modicon M200（全部版本）；Modicon M221（全部版本）；ATV IMC drive controller（全部版本）；Modicon M241（全部版本）；Modicon M251（全部版本）；Modicon M258（全部版本）；Modicon LMC058（全部版本）；Modicon LMC078（全部版本）；PacDrive Eco（全部版本）；PacDrive Pro（全部版本）；PacDrive Pro2（全部版本）。
solution:Upgrade schneider-electric modicon_m100_firmware to a higher version than *; Upgrade schneider-electric modicon_m200_firmware to a higher version than *; Upgrade schneider-electric modicon_m221_firmware to a higher version than *; Upgrade schneider-electric atv_imc_drive_controller_firmware to a higher version than *; Upgrade schneider-electric modicon_m241_firmware to a higher version than *; Upgrade schneider-electric modicon_m251_firmware to a higher version than *; Upgrade schneider-electric modicon_m258_firmware to a higher version than *; Upgrade schneider-electric modicon_lmc058_firmware to a higher version than *; Upgrade schneider-electric modicon_lmc078_firmware to a higher version than *; Upgrade schneider-electric pacdrive_eco_firmware to a higher version than *; Upgrade schneider-electric pacdrive_pro_firmware to a higher version than *; Upgrade schneider-electric pacdrive_pro2_firmware to a higher version than *