NetSight
IP …
medium4.9

CVE-2019-6842

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers…

Impact

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the package using FTP protocol.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
All versions
Schneider-ElectricModicon M340 Firmware
All versions
Schneider-ElectricModicon Bmxcra Firmware
All versions
Schneider-ElectricModicon 140cra Firmware
All versions

Weakness classification

CWE-755

References