CVE-2019-6847CWE-755

CVE-2019-6847: vulnerability in Modicon M580, Modicon M340, and Modicon BMxCRA…

Published · Updated

Follow this CVE+ Monitor Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the FTP service when upgrading the firmware with a version incompatible with the application in the controller using FTP protocol.
Affected products
n/a · Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)