CVE-2019-6842

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the packag...

Schneider Electric Modicon Improper Handling of Exceptional Conditions (CVE-2019-6842)

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause a Denial of Service attack on the PLC when upgrading the firmware with a missing web server image inside the packag...

CVE-2019-6842

CVE-2019-6842 affects Schneider Electric Modicon M580, M340, BMxCRA, and 140CRA firmware. The root cause is improper handling of exceptional conditions in FTP-based firmware upgrade flows, which can cause a Denial of Service, stopping normal device execution after upgrade when the web server imag...