NetSight
IP …
medium4.9

CVE-2019-6844

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers…

Impact

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service atack on the PLC when upgrading the controller with a firmware package containing an invalid web server image using FTP protocol.

Affected products

VendorProductAffected versions
Schneider-ElectricModicon M580 Firmware
All versions
Schneider-ElectricModicon M340 Firmware
All versions
Schneider-ElectricModicon Bmxcra Firmware
All versions
Schneider-ElectricModicon 140cra Firmware
All versions

Weakness classification

CWE-755

References