CVE-2019-6844

CVE-2019-6844 affects Schneider Electric Modicon M580, M340, BMxCRA and 140CRA PLC modules. The vulnerability is a Denial of Service during firmware upgrade when the firmware image for the web server is invalid and transferred via FTP; a check verifies only image headers, enabling fault state dur...