CVE-2019-6843: Improper Handling of Exceptional Conditions

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware version prior to V3.10, Modicon M340 all firmware versions, and Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading...

CVE-2019-6842: Improper Handling of Exceptional Conditions

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the packag...

CVE-2019-6845: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...

CVE-2019-6841: Improper Handling of Exceptional Conditions

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware version prior to V3.10, Modicon M340 all firmware versions, and Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading...

Vulnerability spotlight: Multiple vulnerabilities in Schneider Electric Modicon M580

Jared Rittle and Patrick DeSantis of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. There are several vulnerabilities in the Schneider Electric Modicon M580 that could lead to a variety of conditions, the majority of which can cause a denial of service. The Modicon M580 is the...

PT-2019-3833

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions 140CRA all firmware versions Description A vulnerability exists in the Modicon controllers' firmware, related to the improper handling o...

PT-2019-3834

Name of the Vulnerable Software and Affected Versions Modicon M580 CPU BMEx58 versions affected versions not specified Modicon M580 communication module BMENOC0311, BMENOC0321 versions affected versions not specified Description A vulnerability exists in the handling of exceptional conditions,...

PT-2019-3829

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V3.10 Modicon M340 all firmware versions Modicon BMxCRA and 140CRA modules all firmware versions Description A vulnerability exists in the Modicon controllers related to the improper handling of exceptional...

PT-2019-3830

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions 140CRA all firmware versions Description A vulnerability exists in the Modicon controllers' firmware, related to the improper handling o...

PT-2019-3831

Name of the Vulnerable Software and Affected Versions Modicon M580 versions prior to V3.10 Modicon M340 all firmware versions Modicon BMxCRA and 140CRA modules all firmware versions Description A vulnerability exists in the Modicon controllers due to the lack of integrity check of the firmware...

PT-2019-3832

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions 140CRA all firmware versions Description A vulnerability exists in the Modicon controllers due to the lack of integrity check of the...

PT-2019-3847

Name of the Vulnerable Software and Affected Versions Modicon M580 affected versions not specified Modicon BMENOC 0311 affected versions not specified Modicon BMENOC 0321 affected versions not specified Description A vulnerability exists that could cause the disclosure of sensitive information wh...

PT-2019-3857

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon Premium all firmware versions Modicon Quantum all firmware versions Description A Cleartext Transmission of Sensitive Information issue exists, which could cause the...

PT-2019-3856

Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon BMxCRA all firmware versions Modicon 140CRA all firmware versions Description The issue is related to the transmission of sensitive information in plaintext using th...

PT-2019-3848

Name of the Vulnerable Software and Affected Versions Modicon M580 versions affected versions not specified Modicon BMENOC 0311 versions affected versions not specified Modicon BMENOC 0321 versions affected versions not specified Description The issue is related to the use of REST API read regist...

Schneider Electric Modicon M580 outdated firmware image FTP upgrade denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the FTP firmware update functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An outdated firmware image can cause the device to enter a non-recoverable fault state,...

Schneider Electric Modicon M580 Mismatched Firmware Image FTP Upgrade Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the FTP firmware update functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted firmware image can cause the device to enter a recoverable fault state,...

Schneider Electric Modicon M580 FTP cleartext authentication vulnerability

Summary An exploitable information disclosure vulnerability exists in the FTP functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An attacker can sniff network traffic to exploit this vulnerability. Tested Versions Schneider Electric...

Schneider Electric Modicon M580 UMAS cleartext data transmission vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. An attacker can sniff network traffic to exploit this vulnerability. Tested Versions Schneider Electric...

Schneider Electric Modicon M580 FTP incomplete firmware update denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the FTP firmware update function of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.80. A specially crafted set of FTP commands can cause the device to enter a recoverable fault state,...