CVE-2019-6843

2019-10-2914:48:04

CWE-755

schneider

www.cve.org

AI Score

Confidence

High

EPSS

0.001

Percentile

35.0%

JSON

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the controller with an empty firmware package using FTP protocol.

CNA Affected

[
  {
    "product": "Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info)"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2019-281-02/