CVE-2019-6841

MEDIUM

Modicon M580, M340, BMxCRA, and 140CRA - Denial of Service via FTP Firmware Upgrade

Title source: llm
STIX 2.1

Description

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with no firmware image inside the package using FTP protocol.

References (1)

Core 1
Core References

Scores

CVSS v3 4.9
EPSS 0.0307
EPSS Percentile 86.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-755
Status published
Products (4)
schneider-electric/modicon_140cra_firmware
schneider-electric/modicon_bmxcra_firmware
schneider-electric/modicon_m340_firmware
schneider-electric/modicon_m580_firmware
Published Oct 29, 2019
Tracked Since Feb 18, 2026