CVE-2019-6844

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.

Score

CVSS 3.1 4.9 Medium

Status

Modified - cybersecurity@se.com

Published

2019-10-29

Last modified

2024-08-04

Weaknesses

CWE-755

Affected products

• Modicon 140cra Firmware (Schneider-electric)
• Modicon Bmxcra Firmware (Schneider-electric)
• Modicon M340 Firmware (Schneider-electric)
• Modicon M580 Firmware (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2019-281-02/