1. Home
  2. CVE Database
  3. CVE-2019-6841
MEDIUM · 4.9

CVE-2019-6841

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA ...

Vulnerability Description

A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA modules (all firmware versions), which could cause a Denial of Service attack on the PLC when upgrading the firmware with no firmware image inside the package using FTP protocol.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricModicon M580 FirmwareAll versions
Schneider-ElectricModicon M580-
Schneider-ElectricModicon M340 FirmwareAll versions
Schneider-ElectricModicon M340-
Schneider-ElectricModicon Bmxcra FirmwareAll versions
Schneider-ElectricModicon Bmxcra-
Schneider-ElectricModicon 140Cra FirmwareAll versions
Schneider-ElectricModicon 140Cra-

Related Weaknesses (CWE)

CWE-755

References

FAQ

What is CVE-2019-6841?

CVE-2019-6841 is a vulnerability with a CVSS score of 4.9 (MEDIUM). A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modicon BMxCRA and 140CRA ...

How severe is CVE-2019-6841?

CVE-2019-6841 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6841?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Modicon M580 Firmware, Schneider-Electric Modicon M580, Schneider-Electric Modicon M340 Firmware, Schneider-Electric Modicon M340, Schneider-Electric Modicon Bmxcra Firmware.